This folder is the index for SafePilot security-related documentation.
- Security model and checkpoints:
docs/security-model.md - Deployment hardening (systemd + egress):
docs/hardening.md - Docker deployment (recommended):
docs/docker.md
- At-rest encryption is enabled by default (auto-generated local key if no key is configured).
- Production recommendation: provide
ORCH_MASTER_KEY_FILEfrom your secret runtime. - Planned provider mode: direct AWS/GCP/Vault key-provider integration.
- Limitations are documented in
docs/security-model.md.
- High-level architecture overview:
docs/architecture.md