Audit & Compliance

Security Reviews

• Internal static checks: TypeScript, ESLint, Prettier
• Automated tests for storage, encryption, provider, and transactions
• Third‑party audit before public store release (auditor TBA)
• Post‑launch monitoring and hotfix releases

Open Source

• The extension repository is public: terrancrypt/purro-extension
• Licensed under CC BY-NC-ND 4.0
• Public review of security‑sensitive logic and community contributions via issues/PRs
• Versioned API docs and SDK references maintained

Compliance Posture

• Non‑custodial wallet; keys and data stored locally
• No centralized custody, KYC, or seed transmission
• Privacy‑aligned by design; per‑origin permissions and explicit user consent

Responsible Disclosure

• Report via security channels (email and repository issues)
• Issues triaged with versioned fixes and documented timelines