Security

PO9 is security-first. A skin is data, not a program: it can restyle a workspace, and nothing more.

Guarantees

• No code execution. A .po9-skin contains tokens and static assets — never scripts.
• No network access. Skins cannot phone home, fetch remote content, or exfiltrate anything.
• Bounded assets. Asset types and sizes are constrained by the spec (see Asset Rules).
• Validated on every boundary. Checks run at package time and again on import — a tampered file is rejected.

Reporting

Found a security issue in the spec, validator, or app? Please report it privately via SECURITY.md (link TBD) rather than a public issue.