Security

• No silent fallback path.
• No direct exposure of long-lived Telegram token in repository artifacts.
• Root-only install/reconcile boundaries.
• Reconciliation drift reporting and explicit rollback.

Continue with:

• Limitations and boundaries
• Threat model