Part VI — Network, privacy and versions
This part covers Chapters 25–27: the network access manifest, privacy and telemetry, and upgrade and version numbers.
25. Network access manifest
[!ref] Full details in the User Manual, "Security and privacy".
| Purpose | Protocol | Description |
|---|---|---|
| Sign-in / plan quota / usage | HTTPS | Account management backend |
| Model call (plan) | HTTPS | The provider behind the plan quota |
| Model call (your own key) | HTTPS | Your configured provider |
| Upgrade check | HTTPS | Internal upgrade source |
| Web search (optional) | HTTPS | Only if web.search is enabled |
| Channel (WeChat iLink) | HTTPS / WebSocket | Only with companion messaging: ilinkai.weixin.qq.com (sign-in / session), novac2c.cdn.weixin.qq.com (message CDN), both HTTPS |
| External tool services | HTTPS / SSE | Only with MCP servers configured |
| SBOM online audit | HTTPS | Only sbom.audit / sbom.vex online mode: api.osv.dev |
| SBOM offline DB sync | HTTPS | Only sbom.dbsync sync / kev: OSV dump bucket, CISA KEV feed (can point at an internal mirror) |
The app does not:
- Phone home for behavioural analytics.
- Upload samples to any third party (only
sec.decompilesends the requested byte range on demand, see §12.9). - Auto-sync local sessions to the cloud (unless you explicitly enable Sync).