SECURITY

Built around project ownership.

Harbourform intentionally separates account access, project storage and future executable build workers.

Owner-scoped data

A user cannot retrieve another user's project even if they know its identifier.

Private source storage

Project files live outside ordinary public upload directories and are served through authenticated endpoints.

Scoped AI keys

AI keys map to a single WordPress account and can be rotated at any time.

Public-launch gate

Untrusted npm/mobile builds will not be enabled for public customers until disposable container workers are available.