TaskMarshal controls local CLI coding agents. Treat worker permissions and transcripts as sensitive.

The project is pre-1.0. Security fixes target the latest main branch unless a release branch exists.

Please open a private GitHub security advisory or contact the maintainers through GitHub. Do not post working exploits, API keys, private transcripts, or local machine details in public issues.

TaskMarshal should never store provider API keys in the repository.

Expected local secret locations include provider-owned config files such as:

~/.reasonix/config.json

Ignored local runtime paths include:

• .env
• .reasonix/
• .reasonixctl/
• runs/
• sessions/
• transcripts/
• events/
• *.jsonl

Use manual approval for worker sessions when Codex should review tool requests:

node reasonixctl.js start --id architect --dir /path/to/repo --approve manual

Approve only commands that match the task spec and are safe for the current repository state. Deny or cancel requests that touch secrets, alter git history, install unrelated dependencies, or exceed scope.