Privacy model

Local-first by default

Canvas Pilot is designed as a local agent workflow. The public repo ships the generic framework. Real courses, credentials, and draft outputs stay on the user's machine.

What stays local

• Canvas credentials and browser session cookies.
• School-specific course identifiers and routing files.
• Private course overlays that describe instructor-specific patterns.
• Downloaded assignment inputs and source materials.
• Runs, drafts, result files, and REPORT.md outputs.

What is public

The public project contains the framework: skills, docs, examples, setup guidance, and generic workflow skeletons. It does not need a user's real school, instructor, course, draft, or credential data.

Why this matters

Coursework automation touches sensitive context. A local-first design lets power users operate the workflow without turning Canvas data into a hosted service dependency.