Security Threat Model

Assets include recordings, telemetry, pairing identities, session keys, annotations, and research history. Threats include hostile local peers, replay/out-of-order traffic, stolen device state, malicious imports/plugins, traversal, oversized inputs, and sensitive logs. OrganicVision assumes uncompromised Apple platforms and correct CryptoKit primitives. The custom protocol has not received independent cryptographic review or formal certification.