# Security Policy

UnifiedControl dev-0.2.0 does not perform file upload or external API operations. Host and application packages remain responsible for file validation, external API credentials and backend security. UnifiedControl must not include client secrets or fixed internal service URLs.