FLAUDE/QED-1 is a research demonstration, but it's deployed on the public internet, so it gets a real security posture:

• All inference runs client-side; the static deployment collects and stores nothing.
• No third-party scripts, fonts, or beacons. web/_headers ships a strict CSP.
• The service worker answers same-origin /v1/* requests only, computes math, and caches nothing.
• The optional native API server binds 127.0.0.1 by default and holds no secrets.
• Deployment credentials live exclusively in GitHub Actions secrets / Cloudflare; nothing in this repository grants access to any infrastructure.

Please report vulnerabilities privately via GitHub Security Advisories ("Report a vulnerability" on the repo's Security tab). Reports are appreciated even for a joke — especially for a joke about verification.

• The reveal mechanic itself (discovering the trick early via DevTools is a feature, not a bypass).
• Resource exhaustion of your own browser tab by asking for the 50,000,000th prime.