Security and privacy

Summary

Shared Threads are encrypted, expire automatically, and require their share ID.

Share IDs

Each SSH command contains a random share ID. There is no public list of shared Threads. Anyone with the command can open the share, so handle it like a private link.

Encryption

cueloop encrypts a shared Thread with AES-256-GCM before storing it. The stored copy contains ciphertext, not readable plan text or comments.

Expiration and limits

A shared Thread expires 30 days after its last update. Size limits prevent one share from growing without bound.

Collaborator access

A collaborator can read and comment on the Thread named by the share ID. They cannot list other Threads or send a Message to your agent.