security & privacy

Useful AI needs explicit boundaries.

Membl products touch source code, project records, credentials, personal archives, and CI infrastructure. Their boundaries should stay visible while teams plan, run, verify, and recover knowledge.

control

Open-source boundaries

Lantern, Marsh, and Sweetgrass should each carry their own license, support policy, issue tracking, and release notes.

control

No hidden hosted dependency

Sweetgrass, Lantern, and Marsh should remain useful without a Membl account or hosted control plane.

control

Lantern local data

Lantern state stays local to the developer machine by design; agent CLIs keep their own authentication and network behavior.

control

Marsh runner isolation

Marsh should preserve isolated single-use runner behavior, clear teardown, and explicit cache and registry boundaries.

control

No training use

Repository code, project records, CI metadata, and operational logs are product data. They are not used to train models.

control

Project data ownership

Project records, repo metadata, CI logs, and local agent state should stay inspectable and exportable by the team doing the work.

control

Quill provenance

Quill is being designed to preserve the source behind a result so people can inspect the evidence instead of trusting an unsupported summary.

Operating checklist

Run the open-source tool locally before connecting sensitive projects.

Review each repo's license, install path, and security notes.

For Sweetgrass, decide which projects and GitHub repos the UI may read.

For Marsh, validate runner isolation, teardown, cache boundaries, and secret handling.

For Lantern, keep local machine credentials and agent CLI configuration under the operator's control.

For Quill, review source access, exclusions, provenance, and the private-preview boundary before connecting an archive.

How to proceed

Start with the public repo for the tool. Connect sensitive repos only after the team has reviewed permissions, local state, CI secrets, and teardown behavior.

Install toolsRead overview