This service gives allowlisted Telegram users access to your local Codex account and selected working directories. Use a dedicated bot, protect the Telegram account and keep the host approval boundary enabled. Do not expose state directories, worker sockets, bot tokens or session logs.

Report suspected vulnerabilities through GitHub private vulnerability reporting. Do not put credentials, session content or exploit details into public issues.

See docs/security-model.md for implemented protections and remaining limits.