Bounded parsing
Inputs, paths, payloads, entry counts and output budgets are validated before use.
TrustHub · Security
Security
Saar is an integrity and compression product, not a security certification. This page states the controls and boundaries that apply today.
Integrity checks
Envelope and stream digests detect corruption. They are not encryption, authentication or sender identity.
Extraction boundaries
Bundle paths are validated and staged output is published without replacing an existing path.
Access and tenancy
Hosted workspace access is account-scoped. Enterprise identity and deployment terms are agreed in writing.
Disclosure
security.txt and monitored security, abuse and incident mailboxes are published.
Independent review
A security review package is prepared. No independent review has been completed or is claimed.
Boundary
Do not treat a passing local test, prepared review package or public evidence page as an independent security assessment.