VQX 0.3

Security model

VQX decodes semantic intent. It never grants authority.

Pure decoder

No network fetch, process creation, package installation, tool execution, or authorization decision is required to decode VQX.

Fail closed

Unknown versions/flags, malformed macros, direct local slots, size-limit violations, and digest mismatches are errors.

No auto-install

The beacon may trigger metadata discovery only. It must never cause an agent to install or execute decoder code automatically.

Trust boundary

untrusted VQX bytes
        ↓
bounded parser / decoder
        ↓
structured semantic intent
        ↓
runtime policy + identity + authorization
        ↓
approved action/tool

Read the complete threat model and security rules.