Least necessary access
Workflows should expose only the systems and actions required for their defined objective.
CANVRYN SECURITY
Security is part of the execution boundary.
Canvryn is designed around bounded access, explicit authority and verifiable execution. Potential security issues can be reported directly to security@canvryn.com.
Report a security issue
Send reports to security@canvryn.com. Include the affected URL or component, a clear description of the issue, reproduction steps where available and any evidence that helps us understand impact.
Please do not include credentials, unnecessary personal data or destructive proof-of-concept activity in an initial report.
Execution principles
Human approval
Consequential actions can be held behind explicit approval rather than delegated implicitly through prompts.
Verifiable outcomes
Execution state and useful receipts help distinguish a completed action from an assumed one.
Explicit blockers
Blocked work should remain visible and resumable instead of silently spawning duplicate execution paths.