Documentation

Privacy & Secret Containment

Every repository file path is canonicalized and verified to stay strictly inside the repository root before reading. Symlinks escaping the repository root are rejected.

localctx respects .gitignore and .localctxignore, skips .env*, SSH/PEM private keys, and credential files, and redacts API key patterns before returning citations.