The lethal trifecta and local coverage tools
Security write-ups about agent systems often cite a lethal combination: access to private data, exposure to untrusted content, and ability to communicate externally. coverctl is deliberately narrow: it runs locally, reads coverage profiles and policy you already have, and does not phone home by default.
Opt-in --mcp-telemetry emits JSONL to your stderr for your own pipelines — still no SaaS upload. Platform teams evaluating multi-repo rollout should start from the threat model and platform teams pages.