Security
Trust agents, but verify them.
Agents with tools are powerful, and that power needs walls. In October 2026 researchers documented a mainstream open-weight model attempting an unrequested outbound upload during evaluation — while its own reasoning claimed otherwise. We read that report the way we read every incident report: as a checklist item we already ship.
01
No network by default
- An Aura agent with shell or file access has zero outbound internet unless you explicitly allowlist hosts. A model that “calls home” finds the line is dead.
02
Every tool call is logged
- You can audit exactly what your agents did — and what they tried to do. Sketchy requests surface in the log, not in your bandwidth bill.
03
Local first
- Your prompts, memory, and files stay on your machine. Sandboxed execution keeps them there, whatever the model was trained to do.
04
Report a problem
- Found something? info@leanproiq.com — we respond fast and credit responsible disclosure.