Security & Privacy
Secure Foxora by separating account access, task authority, connected services, and device-local data instead of treating them as one permission.
In this section 7 pages
- 31.01Overview
- 31.02Permission and autonomy securitySet task autonomy separately from operating-system permissions so an agent receives only the authority needed for the current outcome.
- 31.03Local data storageTreat Desktop and CLI data as device-local unless a feature explicitly says it uses the Foxora account or cloud workspace.
- 31.04Memory privacyFoxora conversation memory can contain messages, working memory, and observational history, so keep secrets out of prompts and export before cleanup.
- 31.05Authentication and task securityProtect both the Foxora account session and each task’s execution authority; signing in does not grant unrestricted computer access.
- 31.06Managing secrets and API keysEnter credentials only in Foxora’s dedicated secret fields, restrict their scope at the provider, and rotate them immediately after suspected exposure.
- 31.07Exporting or deleting dataExport and delete account, cloud, and device-local data as separate scopes, verifying each result before moving to the next.