Email hello@mimu.sh, or open a private security advisory.

Please do not open a public issue for a vulnerability. I read reports as soon as I can, but this is a single-maintainer project — there is no guaranteed response time, and I would rather tell you that than promise one I can't keep.

It runs inside your OpenCode process, as a plugin, under your own account. There is no hosted service, no telemetry, and no network access of its own.

What it touches:

• The outgoing model request, immediately before dispatch. It reads and rewrites the message array for the current call.
• The model registry (ctx.model.list) to look up a context window size.
• A log file, only if you set the logFile option. Nothing is written by default.

What it deliberately does not touch:

• Persisted session history.
• Credentials, auth tokens, or provider configuration.
• Anything on disk outside the log file you name.

Because the plugin rewrites requests, a bug here can silently drop content from a model call. Trimming is lossy by design, and the logFile option records what was trimmed so you can audit it. If you see content go missing from a model response, enable logFile and check the trimmed entries.

If you find a case where pruning produces a request the provider rejects, that is a security-relevant availability bug — the session can be wedged. Please report it rather than working around it.