Testing and Security

Agent Brain has two testing surfaces: the product stack and this marketing/docs site.

Product stack checks

The Agent Brain product repository includes TypeScript, Python, desktop, smoke, and benchmark test paths.

pnpm test
pnpm test:desktop
pnpm test:brain-engine
pnpm test:smoke

Use the product repository docs for the full testing strategy and release checklist.

Site checks

This website should pass lint, production build, smoke tests, accessibility checks, and security header checks before deployment.

npm run lint
npm run build
npm run test:e2e
npm run test:security

Security posture

The site uses restrictive security headers, including content security policy, clickjacking protection, content type protection, HSTS, referrer policy, and a restrictive permissions policy.

The staged checkout endpoint returns a disabled response unless AGENT_BRAIN_CHECKOUT_ENABLED=true is explicitly set.

Local product privacy

Agent Brain product data stays in your local stack unless you expose or export it. Secure Docker, local ports, backups, and machine access according to your own environment requirements.