SECURITY

Security boundaries.

Settlens is designed as a read-only assurance tool. It does not custody funds, sign transactions or require private keys.

Least privilege

Containerized execution, non-root runtime and restricted capabilities.

Evidence integrity

Reports can be hashed and verified independently.

Responsible disclosure

Report vulnerabilities privately through the project security process.