Security posture

conndeck keeps cluster operations local by default and makes security boundaries visible before download.

No telemetry by default

The desktop app should not emit billing-host or analytics egress as part of normal cluster operations.

Kubeconfig discovery and status checks avoid exposing tokens, certificates, client keys, or exec environment data to the webview.

Signed builds, SBOM, provenance, and verify commands are part of the public release flow.