Security and privacy
aituner can change system settings and runs a local server, so it is locked down by default.
What stays on your Mac
Your prompts, code and results. Models run locally. aituner contacts only canirun.ai and Hugging Face (model information and the files of models you choose) and GitHub (update checks). There is no account and no telemetry.
The local server
- Listens on
127.0.0.1only. A random 256-bit session token is created at each launch and exchanged once, through a single-use link, for an HttpOnly, SameSite=Strict cookie; every API call needs it. - A Host allow-list against DNS rebinding, an Origin check on every change, a strict Content Security Policy, and no CORS.
- The API accepts change keys only. Values are recomputed from measurements, and privileged scripts are built from constants and checked against a character allow-list. Admin rights are requested with the standard macOS prompt; aituner never sees your password.
Downloads
Model downloads fetch safetensors, config and tokenizer files only, never Python code or pickles, and trust_remote_code is never enabled. Only models the recommender offered can be downloaded. Updates are installed only after the signature, notarization and checksum checks described in Updates.
Your data on disk
App data lives in a folder only you can read (0700); the database, logs and cached images are 0600. Every state-changing request is recorded in aituner's log.
Reporting a problem
Please report security issues privately to [email protected], not in public issues. Other problems are welcome as GitHub issues.