SECURITY
Report a Security Issue
Report a vulnerability to developers@allooloo.ai. Machine-readable: /.well-known/security.txt.
- The receipts table is append-only at the engine: UPDATE and DELETE are refused by triggers.
- Writer tokens are held by the door only as sha256; signing keys sit as Worker secrets.