ZeroTurn executes deterministic local actions. Treat every new action as a local side effect and keep the allowlist small.

Report security issues privately through the repository owner account before public disclosure.

• Parse only explicit, parameter-complete requests.
• Restrict file writes to configured workspace roots.
• Prefer dry-run support for new providers.
• Return structured failure payloads instead of guessing.
• Keep external sends, UI clicks, and desktop actions behind explicit providers and documented permission gates.