A second pair of eyes.
Defence code is reviewed by someone who didn't write it before it ships.
Security posture · Deimos AI LLC
Security at Deimos AI LLC is a design rule, not a feature. Here is what you can check for yourself.
Ratchet and Crimp are published under the Apache License 2.0. Read every line.
github.com/thearchitect0x-glitch ↗Crimp's first release is signed, so you can check it came from us and wasn't altered.
Crimp releases ↗ · 13 Sep 2026Your browser just asked our server for this page again and printed what came back. Nothing here is typed by hand.
| Header | Value | In plain English |
|---|---|---|
| Content-Security-Policy | self-only scripts, no frames, no plug-ins | Only our own code may run on this page. |
| Strict-Transport-Security | max-age=31536000 | Your browser will only ever talk to us over HTTPS. |
| X-Frame-Options | DENY | No other site can wrap this page in a frame to trick you. |
| Permissions-Policy | camera, microphone, location: off | This page can't ask for your camera, microphone or location. |
| Referrer-Policy | strict-origin-when-cross-origin | Sites you click through to see where you came from, not what you were reading. |
| X-Content-Type-Options | nosniff | Files are treated as exactly what they say they are. |
Without JavaScript you see the policy as published in our headers file.
Cookies set by this page.
Requests to anyone but us.
Defence code is reviewed by someone who didn't write it before it ships.
Drills try to break what we built, and the fixes land before the claims do.
Every public number has a source and a date in the Record.
No retaliation tools, no reaching into other people's systems. Metadata only where we observe the public web.
§04 · Report a vulnerability
Ratchet and Crimp each publish a security policy in their repositories. For anything else, message Deimos AI LLC on LinkedIn and we'll open a private channel. A dedicated disclosure inbox and security.txt are coming.