安全是核心目的，而不是一项功能。
CIND3R3LLA is a consent firewall: nothing is published unless its author asked for it. This page explains how that is enforced, and what the planned CSAM screening stage will and will not do.
This is where CIND3R3LLA is going, and it is not there yet. The design: every image and video is hashed at receipt, independently of consent, and compared against databases of known abuse material. A match is quarantined, encrypted, withheld from every public path and preserved for the authorities, never quietly deleted, because deleting a match destroys the evidence that makes a prosecution possible. Today the storage and quarantine machinery is built and no detection provider is connected, so no screening runs. Note the limit that will remain even once it does: hash matching detects known material only. It cannot detect new material, and a no-match result is not a statement that anything is safe.
通行密钥（WebAuthn / FIDO2）：绑定设备，抗钓鱼、抗暴力破解。没有共享密码，没有可泄露或被重复使用的凭据。
最小权限并相互隔离。配合规划中的本地 AI，审查与对话永远不会离开您的基础设施，也不存在需要信任的第三方处理者。
审查之后的第二道防线：任何人都可以举报已发布的内容。运营者进行审查并移除，每一步操作都会记入审计日志。
请通过仓库中的安全联系方式私下报告。我们会为负责任的披露署名致谢，并认真对待每一份报告。