Profiles: reviewed safety facts on the 10 pilot pages (Q4 plan E2)

[YugantM]

Q4 plan E2 (hosted-service facts), with the list settled by the E1 audit (#344). Draft: these are statements about companies on public pages, so the plan says you review every line before it merges. Not deployed, not merged.

What it adds

• safety_facts.json: 50 facts for Composio, Cline, Firecrawl, Dify, E2B, Claude Code, Codex, LiveKit Agents, Freebuff and Kilo Code. Topics: Who runs it, What it can reach, Where your data goes, Security practice.
  • Each fact has a source URL and an evidence class: declared (the publisher's own statement, shown as PUBLISHER, not verified by us) or observed (we checked it on 6 Oct, shown as CHECKED). The source class (from the code) exists but isn't used yet.
• Profile section "What X can reach, and who runs it", above "How X could raise its score". It uses existing CSS classes only, and renders only on pages that have facts.
• load_safety_facts() / safety_fact_problems() in fetch_and_build.py. A malformed file renders nothing rather than breaking the render, and the test suite rejects one before it ships.
• Dockerfile copies safety_facts.json (the predeploy test enforces it).

Things worth your eye

• Freebuff: its privacy policy says prompts and messages may be analysed to select and measure ads, including by deriving interest categories. Quoted closely, with the training carve-out included.
• Kilo Code: its terms now name Anaconda, Inc. with its affiliate Kilo Code Inc. as the operator.
• Composio: the cloud stores connected apps' OAuth tokens and API keys, with keys Composio holds by default. This is likely what "is composio safe" searchers most want to know. It's stated with Composio's own mitigations (redaction, ZDR, customer-managed keys).
• Dify: "21 security advisories, 14 in the last 12 months". This is factual, but it reads differently from a certification line, so check you're comfortable with it.
• Codex: only sandbox facts. OpenAI's privacy page refused automated fetches (403), so there's no data-retention line rather than an unsourced one.
• No absence claims about certifications ("has no SOC 2"). The only absence facts are things we observed ourselves (no security.txt, no SECURITY.md).

Checks

• tests/test_safety_facts.py:
  • the shipped file is valid and every key is a real listing slug;
  • topic order and labels are correct;
  • a malformed file is rejected whole;
  • a profile without facts is byte-identical to the old template (also confirmed against origin/main's template directly);
  • a profile with facts shows each fact, its class and source, and no empty headings.
• scripts/lastmod_diff.py: 9 of 2,430 pages re-dated, all pilot profiles. Freebuff is the 10th: it's still pending in local data but scored in prod (56.3, C), so it will show there.
• ./scripts/gates.sh all green. Rendered Composio checked at desktop and 375 px: no overflow, chips fit their column.

Not in this PR (next, per the audit)

• The E3 access facts for local tools (Desktop Commander, Ollama, Open WebUI, AnythingLLM…) and the hero verdict and FAQ changes. Both build on this mechanism.
• E4 (OSV advisory history) awaits your decision.

🤖 Generated with Claude Code

[YugantM]

Line review applied (8 Oct), rebased onto main (15f79ca9, after #352):

• Composio 🔍 New agent candidates — week of 2026-05-24 (468 found) #1: "Run by Sampark Inc, doing business as Composio. Its terms are governed by Delaware law." (governing law, not incorporation)
• Cline: the docs don't state auto-approve defaults, and the extension's own AutoApprovalSettings.ts auto-approves file reads and edits, browser use and MCP calls by default; commands ask first (since fix(vscode): disable command auto-approval by default cline/cline#11865). Replaced with a docs fact plus an IN CODE fact citing the source. Provider line limited to what the README says.
• Advisory lines carry severities, re-counted with pagination; no "no advisories" lines.
• Claude Code: added its 33 maintainer advisories (26 high, 4 medium, 3 low; 23 in 12 months). Every comparable page already showed its count.
• Dify: dropped "download reports from the console" (no reachable source).
• Codex: Auto is the preset it recommends for version-controlled folders; its docs don't call it the default.
• LiveKit: operator line quotes the README ("connects to LiveKit Cloud or your self-hosted server").
• Freebuff: ad line sourced from the privacy policy alone.
• The legend explains IN CODE only on pages that have such a fact (tested).

Observed facts re-checked 8 Oct. lastmod_diff: 9 of 2,430 pages, all pilot profiles. Gates green. #348 rebased on this, with the same advisory rules applied.