Security
Implemented controls, stated plainly.
Zolli coordinates work across connected machines. These are the controls implemented in the current runtime and the material boundaries around them.
Execution boundaries
Task ownership uses bounded leases. Workloads and execution images are allowlisted. Where the Docker execution tier is used, containers run with networking disabled, and task environments are scrubbed before execution.
Machine identity
Machine writes are authenticated and scoped to the connected machine's active work. A machine identity does not widen a task beyond its live lease.
Artifact integrity
Artifacts and checkpoint manifests are hash-verified before the runtime treats them as committed progress.
Recovery history
Result acceptance is idempotent so repeated completion attempts do not create multiple accepted outcomes. An append-oriented event history records the protocol transitions used to inspect interruption and recovery.
Current boundaries
Zolli Cloud infrastructure remains early access. Security also depends on the selected deployment, connected machines, workload configuration, and infrastructure configuration. No compliance certification is claimed.
Report a concern
For responsible disclosure of a suspected security issue, email phongct1105@gmail.comwith enough detail to identify the affected behavior.