IronLaw runs locally and does not upload source code, working data, or credentials. Values written to the memory store are redacted before storage.

Do not open a public issue for security issues. Report privately to the maintainers. We respond to verified mis-detection, data-leak, and supply-chain issues within 24 hours, and to false-positive blocking issues within 48 hours.