Security

rho takes untrusted input (LLM output), interprets it as instructions, and executes those instructions with the full privileges of the user. The security model is defense-in-depth — no single layer is sufficient, but each layer raises the bar.

See also:

• Threat Model
• File Sandbox
• Secret Redaction
• Prompt Injection Defense
• Egress Control (historical)