Security
Fail-closed by design
ActantOS assumes agents will be exploited, hallucinate, and make mistakes. Security is infrastructure, not a prompt instruction.
Fail-closed adapters
Every integration point enforces a short decision timeout. On timeout, connection error, malformed response, or daemon crash, the adapter raises a fatal error and terminates the tool call — it never defaults to execute.
Week 1: 200ms local / 2s remote timeout contract in Pi and MCP adapters.
Out-of-process policy
The Cedar policy engine runs completely outside the agent memory space. Prompt injections cannot modify runtime authorization rules.
Credential access is always deny
Reading .env, secrets, or credential paths is unconditionally denied — never routed to approval. This is a hard Week 1 rule.
reason_code=policy_forbid.credential_path
Tamper-evident audit
Every intercept, decision, and tool result is recorded in a Postgres hash-chain. Session timelines support forensic review.
Enterprise WORM export and SIEM connectors on the Phase 3 roadmap.
Data handling (MVP)
- MVP runs locally via Docker Compose — data stays on your machine.
- No production SaaS deployment in Week 1; hosted control plane is roadmap.
- Tool result payloads store hashes and redacted previews, not raw secrets.
- Decision tokens are short-lived HMAC-signed payloads bound to scope and constraints.
Report a vulnerability or security concern at security@actantos.com.