Trust & security
Boundaries you can inspect.
Authorized work
Use NotHoly only for research you are permitted to conduct. The MVP does not perform autonomous exploitation, credential attacks or unrestricted internet scanning.
Operator control
Tool approvals refer to specific actions and inputs. Model output and retrieved material cannot grant permission.
Evidence and privacy
Access checks apply to runs, session history and evidence. Review processing disclosures before sending sensitive material. No audited-security or compliance certification is claimed.
Production review
Public production access remains gated on provider terms, legal review, verified capabilities and operational readiness.