Witnora does not need open-ended access to your source, prompts, credentials, or raw business data. Customer-owned components enforce and observe locally; Nora explains only the minimal verified facts returned to Witnora.
The write boundary and independent result check operate with customer-held authority.
Nora cannot turn a recommendation into policy, approval, or execution.
For a declared covered path, Witnora can verify the signed authority chain, exact action binding, Gateway dispatch record, customer-operated observation, packet integrity, and stated evidence strength.
Witnora cannot prove control of undeclared or bypass paths, guarantee future Agent behavior, establish organizational independence by itself, or certify a vendor's compliance program.
The customer-owned boundary does not silently convert missing authority into permission. Unverified or incomplete paths remain explicitly partial.
Customer-held credentials and local services remain under customer control. Project credentials can be revoked without transferring raw provider credentials to Nora.
The design-partner acceptance path uses an isolated sandbox and deterministic target. The optional GitHub integration is read-only preflight only: it cannot dispatch, merge, or produce live-write acceptance evidence.
Responsible disclosure
Contact the Witnora founder at ziwei@witnora.com with the affected version and a non-sensitive summary. Ask for a private follow-up channel before sharing sensitive reproduction details. Do not include credentials, customer evidence, private endpoints, or exploit details in a public issue.