License & Security
License
Section titled “License”AgenticThesis is licensed under the GNU Affero General Public License v3.0 (AGPL-3.0-only). Review the license before distributing a modified version or offering it over a network.
Security reports
Section titled “Security reports”Do not disclose credentials, private investor data, or an exploitable vulnerability in a public issue. Use GitHub’s private vulnerability reporting surface when it is available for the repository; otherwise contact the repository owner privately through the profile linked from GitHub.
For ordinary defects and feature requests, use GitHub Issues.
Trust boundary
Section titled “Trust boundary”AgenticThesis processes untrusted filings, issuer pages, uploaded documents, and model output. Its safety boundary depends on:
- preserving original bytes and provenance before interpretation;
- treating vector data as a rebuildable index, not authoritative state;
- validating exact evidence locations and quotes;
- keeping model output non-authoritative until Human Review;
- preventing stale approvals from overwriting newer thesis history;
- serving stored artifacts as downloads rather than executable browser content.
Investment boundary
Section titled “Investment boundary”The project maintains company-fundamentals theses. It does not provide personalized investment advice, determine fair value, size positions, or decide whether to buy, sell, or hold a security. Source evidence may be incomplete or wrong, model output may be wrong, and Human Review remains mandatory.