{"path":"SECURITY.md","size":1306,"locked":false,"binary":false,"truncated":false,"content":"# Security Policy\n\n## Reporting a Vulnerability\n\nIf you find a security issue — especially anything related to:\n- The Solana wallet secret key handling in `lib/sns.js`\n- Storacha credential handling in `lib/storacha.js`\n- Any way a malicious build/repo could exfiltrate secrets during `anchr deploy`\n\nplease **do not open a public issue**. Instead, report it privately via\nGitHub's \"Report a vulnerability\" feature under this repo's Security tab, or\ncontact the maintainer directly (see repository profile).\n\nWe'll acknowledge reports within a few days and aim to patch confirmed issues\nbefore public disclosure.\n\n## Scope notes\n\nAnchr is an early-stage MVP. It handles two categories of sensitive material:\n\n1. **Storacha upload credentials** (`ANCHR_STORACHA_KEY` / `ANCHR_STORACHA_PROOF`) —\n   scoped via UCAN delegation to upload-only permissions on one Space.\n2. **A Solana wallet secret key** (`ANCHR_WALLET_SECRET_KEY`) — used to sign\n   the SNS record-update transaction. This wallet should own the `.sol`\n   domain and nothing else of value; **do not** reuse a wallet holding\n   significant funds or other domains as the CLI's signing wallet.\n\nBoth are read from environment variables only — never committed, logged, or\ntransmitted anywhere except directly to Storacha's API / Solana RPC.\n"}