Security Hardening Guide

Confidence: Tier 2, based on CVE disclosures, security research (2024-2026), and community validation

Scope: Active threats (attacks, injection, CVE). For data retention and privacy, see data-privacy.md

Further reading: the attack surface nobody audits walks through sandbox, hooks, MCP, and supply chain in one pass.

---

本篇目录

• TL;DR - Decision Matrix
• Apply Controls at the Owning Layer
• Part 1: Prevention (Before You Start)
• Part 2: Detection (While You Work)
• Part 3: Response (When Things Go Wrong)
• Appendix: Quick Reference
• Part 4: Integration (In Your Daily Workflow)
• Claude Code as Security Scanner (Research Preview)
• See Also
• References
• Part 7: Remote Control Security {#remote-control-security}
• Part 8: Cross-Session Messaging Threat Model {#cross-session-messaging-threat-model}