> For the complete documentation index, see [llms.txt](https://docs.slinky.network/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.slinky.network/operate-safely/security-checklist.md).

# Security checklist

#### Wallets and payment

* Keep private keys in a server-side secret store or isolated signer.
* Set per-request, hourly and daily limits.
* Restrict networks, assets, hosts and capability types.
* Check payment state before retrying an ambiguous request.

#### Requests and output

* Remove details that the selected tool does not need.
* Treat retrieved pages and model output as untrusted.
* Sanitize content before rendering it as HTML.
* Require approval for transfers, orders and other actions.

#### Logs and support

* Log status, timing and payment state instead of prompt bodies.
* Redact authorization headers, cookies and wallet secrets.
* Keep diagnostic capture disabled by default.
* Document access and retention for operational logs.