Safety model

Ramulus uses the user's own Claude Code installation and sign-in. It does not extract a subscription credential, impersonate its API client or run a model service itself.

Unknown CLI states block automatic message delivery. Permission and trust prompts require human attention. Automated text uses bracketed paste with explicit Enter and a draft guard; it is not typed blindly into a terminal.

Local GUI and CLI control use protected Unix sockets. Optional phone access adds an authenticated loopback listener behind Cloudflare Tunnel and Access. Forwarded headers never create trust. Raw remote terminal bytes are not redacted and require a timed unlock.

Licensing limits only new managed spawns. Expiry never terminates current work. App telemetry is off by default and is sent only when you enable usage sharing. Its fixed schema excludes content. See telemetry for the fields and current preview availability.