Skip to content

Security: BurrowHammerStove/agent-beacon-pro

Security

SECURITY.md

Security

Beacon is endpoint-local telemetry for supported AI agent runtimes. It collects supported local runtime activity, normalizes that activity into Beacon endpoint events, and writes those events to local JSONL for local review or customer-controlled forwarding.

For the full enterprise review package, see the Beacon security review.

Default Posture

Area Default behavior
Collection Local OpenTelemetry receivers on 127.0.0.1 or local beacon-hooks adapter execution
Content handling Retained local telemetry is subject to secret redaction, sanitization, truncation, and event-size limits
Forwarding Optional and customer configured
Hosted dependency None required for normal endpoint collection or hook execution
Removal Endpoint uninstall removes managed service and configuration files, with explicit flags to keep logs or config
Storage Local runtime.jsonl on the endpoint, bounded by rotation at 10 MiB with five numbered archives

Data Flow and Threat Model

Beacon receives supported runtime signals through localhost OpenTelemetry receivers or local hook execution, normalizes them locally, and writes one JSON object per line to the runtime log. The local dashboard reads that log over loopback, and any SIEM forwarding is configured and controlled by the customer.

Read the full data flow and threat model.

Data Inventory

Beacon writes normalized endpoint events only when a supported runtime provides telemetry through a configured local surface. Required event fields identify the event, endpoint, and harness; optional entities add session, tool, command, file, approval, MCP-like, prompt, destination, and health context when available.

Review the full data inventory.

Redaction and Size Limits

Beacon may write prompt text, command output, raw attributes, tool input, and diff content to local JSONL. Secret redaction, sanitization, truncation, and event-size limits are applied before events are written or forwarded through supported customer-managed destinations.

Review the controls in retention and redaction.

Endpoint Operations

Beacon endpoint operations are local to the managed machine. User-mode installs use per-user paths, while system-mode installs use root-managed configuration, log paths, and a local macOS LaunchDaemon. Runtime log storage is bounded: the active log rotates at 10 MiB and Beacon keeps up to five numbered local archives. Normal endpoint collection does not require a hosted account, remote policy fetch, MDM API credentials, or external network connection.

See paths, permissions, network behavior, and uninstall guarantees in endpoint operations.

Security Policy

Report suspected vulnerabilities or security concerns to security@asymptotelabs.ai. Include the affected Beacon version, operating system and architecture, install mode, reproduction steps, expected impact, and any coordinated disclosure constraints when available.

For disclosure guidance and release verification details, see the security policy.

Endpoint Event Schema

Beacon endpoint events are JSONL records with a stable schema contract for local inspection and customer-managed ingestion pipelines. Each event includes required context such as timestamp, vendor, product, schema_version, event, severity, endpoint, and harness, with optional entities added when the source provides them.

Inspect the normalized contract in the endpoint event schema.

Related Resources

There aren't any published security advisories