Storage
Sessions, context chunks, connector manifests, reports, ledger entries, and proofs are stored in a local SQLite database under MOLEFANG_HOME (default ~/.molefang). Images are stored under media/. The local database can be deleted to remove the hive.
Secrets
API credentials are stored in the OS credential vault where possible, with environment-variable fallback. Credentials are never written to SQLite or the proof log.
Providers
BYOK and local endpoints operate under your provider terms. Marketplace providers must carry a signed ZDR attestation. Mole Fang cannot guarantee a third party’s behavior; it can block calls when the signed policy state no longer matches.
Controls
Users can report a provider, freeze it for the reporting session, request blacklisting, and request review of unspent reserves when eligibility changes.