Security posture

Safety, privacy and security are product requirements.

TrustRx is pre-pilot. Its current codebase is designed to fail closed, minimise public data, scope tenants, preserve auditability and keep external actions asynchronous and controlled.

Responsible disclosure

Do not include health data, credentials, personal data or exploit details in public issues. Use GitHub private security reporting for this repository when available.

Current boundary

No TrustRx production health-data service is live. Do not send health reports, credentials, or urgent incidents through the public website or repository.