Local processing, defensive boundaries.

Converted code is never executed. Markup is sanitized, archive paths are normalized, decompression is bounded, and jobs are cancellable.

Report a vulnerability

Do not open a public issue for an unpatched vulnerability. Follow the private instructions in SECURITY.md.

Archive and supply-chain policy

Absolute and traversal paths are rejected. Extraction stops above 10,000 entries, 2 GiB, or a 100× ratio. Engines and models must be version-pinned, integrity-verified, and license-documented.