Security Architecture & Trust Guarantees

Core Security Pillars

1. 100% Zero-Telemetry Guarantee

Corral contains no analytics SDKs, no tracking pixels, and no remote telemetry. All workspace orchestration occurs entirely on your local machine.

2. Credential Isolation

Corral does not store or log Git passwords, SSH passphrases, or personal access tokens. It delegates authentication directly to your system's native ssh-agent and Git credential helper.

3. Supply Chain Security & Sigstore Signing

Every release binary is signed with Sigstore Cosign and accompanied by a CycloneDX Software Bill of Materials (SBOM).