Privacy contract

The client cannot spy by design.

Both CLI and API enforce a closed event schema. Any extra field rejects the whole batch.

Allowed signals

event
ts
anon_id
terminal_type
duration_ms/ad_id when relevant

Never collected

prompt text
source code
files
repository names
model responses
shell output
personal messages