Please do not open a public GitHub issue for security problems. Email the repository maintainer with a description, affected version, reproduction steps, and any relevant logs. We aim to acknowledge critical reports within 2 business days and ship a fix within 30 days.

translator is a local-first desktop app. Its security boundary is:

1. Tauri IPC: frontend code invokes a fixed command surface in crates/app/src/commands.rs. Commands validate inputs and return Result<T, String> rather than panicking on user input.
2. OS Keychain: API keys are stored through crates/core/src/secrets.rs. Secrets are not written to config.json.
3. Outbound HTTPS: selected text is sent only to the translation services the user enables. The app has no telemetry backend.
4. Updater: update checks use the official Tauri updater plugin and signed updater artifacts. The public key is committed in tauri.conf.json; the private key is stored only in GitHub Actions secrets.

Out of scope: malicious local users with access to the same desktop session, kernel compromise, compromised upstream translation providers, and professional copy review for every localized string.

• No plaintext API keys on disk; OS Keychain only.
• CSP configured in crates/app/tauri.conf.json.
• No remote scripts in the frontend bundle.
• Update artifacts are signed by Tauri updater signing keys.
• Updater private key is not committed.
• Startup update failures are logged and do not block launch.
• Platform code signing for macOS/Windows installers.
• SBOM emission in release artifacts.
• cargo audit/advisory gate in CI.

unsafe is limited to platform FFI layers:

• crates/platform/src/macos.rs wraps macOS Accessibility APIs.
• crates/platform/src/windows.rs wraps Windows UI Automation and keyboard fallback APIs.

There is no unsafe in crates/app or crates/core. Frontend secrets are write-only from the UI perspective: the app can set/delete/probe key presence, but cannot read a stored API key back into React state.

Before publishing a release:

cargo fmt --check
cargo clippy --workspace --all-targets -- -D warnings
cargo test --workspace --all-features
cd ui && npm run typecheck && npm run lint && npm run build
actionlint .github/workflows/*.yml

For updater-enabled releases, also verify:

• bundle.createUpdaterArtifacts is enabled.
• macOS release builds import the fixed MACOS_CODESIGN_* self-signed certificate secrets before Tauri packaging.
• TAURI_SIGNING_PRIVATE_KEY_B64 decodes to the private key string printed by cargo tauri signer generate.
• TAURI_SIGNING_PRIVATE_KEY_PASSWORD matches the key if the key was generated with a password.
• The GitHub Release includes updater manifests, updater archives, and signatures for every published platform.