Security & Privacy

Local-first by default. Your context stays under your control.

Local-first is the default security posture: your context stays under your control.

Threat model

• Local data. Memory and skills live in ~/.poormad/ on your machine. Deleting it erases everything.
• Transit. Surfaces talk to the gateway over WebSocket. Use TLS (wss://) for any non-local connection.
• Secrets. API keys and gateway tokens are secrets — they live in .env, never committed or logged.

Gateway auth

• Local loopback: auto session ticket, no token needed.
• Remote: require a strong token; prefer a reverse proxy with mTLS for sensitive setups.
• Never bind to 0.0.0.0 without a token.

Telemetry

PoorMad ships no outbound telemetry or attribution by default. Any analytics requires an explicit opt-in config gate.

Sharing context

The agent only sends data to a provider when you prompt it. It will not echo tokens back into chat. Review what a skill touches before enabling skills.auto_write.