Security and Responsible Disclosure
Security model. ENS ownership access, domain-bound signature, temporary sessions, revalidation, fail-closed locking, content security policy and local custody.
Limits
Client-side controls are inspectable and modifiable. They are not confidential DRM. A compromised wallet, device, browser, extension or RPC may compromise the session.
Protected deployment required
Confidential data, persistent connectors, payments, transactions, critical systems, active cybersecurity or individual rights require protected, logged, tested and insured server architecture.
Responsible disclosure
Send a minimal report to info@quebec.ai; do not circumvent controls, access others’ data or publish an exploitable issue before reasonable remediation time.