I turned the trust-boundary README checker into a slightly more usable release instead of only a hosted form.
Repo: https://github.com/HectorGuerilla/trust-boundary-checker
Release: https://github.com/HectorGuerilla/trust-boundary-checker/releases/tag/v0.1.0
Free hosted checker: https://api-production-7bbb.up.railway.app/agent/trust-boundary-check
What changed:
standalone Python CLI for README / launch-page copy
manual audit template
sample trust-boundary section
GitHub Actions example for documentation PRs
public intake issue for feedback/free audit requests
The point is deliberately narrow: before someone installs an AI/security/CLI/devtool, can they quickly answer:
where does this run?
what data leaves my machine?
what permissions/tokens are needed?
what is stored or logged?
how do I revoke/uninstall it?
when should I not trust the output?
This is not a security scanner.…