Subshell is designed to run on your own machines and private networks; its full security model, including where it deliberately falls short, is documented in the public security model, with the engineering threat model in docs/security.md.
Please report security issues privately to theo@disaresta.com rather than opening a public issue. We aim to acknowledge within two business days.
We ask for no public disclosure before a fix ships or 90 days pass, whichever comes first, and we are happy to credit responsible reports in the advisory.