React Native Security

Use Ansight only in approved development variants and on a trusted local network. The native connection uses clear-text UDP and ws://.

• Initialize native defaults behind __DEV__ or an equivalent build guard.
• Keep tool discovery and execution deny-all in protected builds.
• Prefer read-only tools.
• Do not hard-code enrollment payloads in JavaScript, Metro variables, or native resources.
• Configure only the native privacy descriptions required by the QR scanner and local network.
• Revoke a registration through the host or clear app data when the installation should no longer reconnect.
• Keep cellular host connections disabled unless the workflow intentionally uses mobile data or a personal hotspot.
• Treat JavaScript/native crash messages, stacks, breadcrumbs, and metadata as sensitive. Disable crash capture or handoff when policy requires it.

Native crash reports are bounded and stored in app-private files until delivery or expiry. See Crash Capture.