Security and privacy

Local-first is a boundary, not a slogan.

Compass keeps structural extraction and graph queries on the machine where the repository lives. Optional network and credential paths are explicit.

Trust boundaries

Know what happens before you enable it.

Default

No hosted dependency

The native CLI does not require Python, embeddings, a vector database, model credentials, or runtime grammar downloads.

Optional

Provider paths are visible

Semantic enrichment and external integrations are configured capabilities, never silent fallbacks.

Bounded

Inputs are treated as untrusted

Source files, archives, network responses, queries, and subprocess output stay within explicit limits.

local

explicit credentials

validated outputs

deterministic