This CLI is intentionally offline and credential-free. It does not collect or transmit telemetry and does not accept or store tokens, cookies, or credentials. It locally reads only the export files or stdin content that the user explicitly supplies. Do not include secrets or sensitive export contents in issues, logs, fixtures, or pull requests.

The project does not implement or emulate the Monium web console's private gateway. It does not scrape browser state, reuse console cookies, accept a custom live endpoint, or fall back to opening a browser when a live operation is unavailable. monium capabilities is local metadata only and performs no network or credential probe.

No dormant live provider, transport adapter, guessed alert schema, or public provider/plugin ABI is packaged in this release. A future provider must be based on a supported upstream API contract and official fixtures. Alert ownership scope and telemetry query scope must be modeled separately; request or response scope echoes are not treated as proof of server-side enforcement.

Before registration, a provider must enforce request bytes/nodes before the network boundary; stream response bodies under hard byte caps, absolute connect/read/total deadlines, and cancellation; use a closed official alert definition union; and expose honest completeness/redaction metadata. Unknown schema semantics fail closed. Negative tests must cover cross-scope reads, reserved filter overrides, list-to-read ID round trips, pagination faults, oversized bodies, cancellation, and credential canaries in all output/error paths. Custom endpoints, private gateways, browser sessions, and browser fallbacks are prohibited for live operations.

To report a security issue, use the repository's private advisory form:

https://github.com/kizz-tech/monium/security/advisories/new

If private reporting is unavailable, open a non-sensitive GitHub issue without reproduction details or secrets and ask the maintainers for a private contact channel. Include only the minimum version and impact information needed to start triage.