Docs / Security

Data and control boundaries.

Local state

The SQLite event ledger, policies and content-addressed checkpoints stay in the local Dovet data directory by default with owner-only permissions.

Provider data

Codex and Bedrock receive only context permitted by the selected project profile. Credentials remain in their provider tooling; Dovet does not copy session cookies or rotate identities.

Process ownership

Automatic interruption applies only to managed process groups Dovet started and can identify by PID and birth time. Lease expiry alone never proves a worker stopped.

Known limits

Dovet cannot reconstruct hidden reasoning, unsaved bytes, or continue local execution while the machine sleeps. Passing configured checks does not prove behavior those checks did not cover.