# Security

outsrc runs code-writing CLIs on the owner's computer.

- Allowlist repos in `~/.outsrc/config.toml`. There is no tool that adds one.
- Jobs use a new git worktree on `agent/outsrc-<id>`.
- The job process does not inherit deploy tokens.
- `permissions = "auto"` skips interactive grants. It is not a sandbox around the network.
- `permissions = "ask"` does not give the CLI a keyboard. Questions use `outsrc-ask`.
- The public site at https://outsrc.ing only describes setup. It does not start jobs and it does not take payment.