security: add telemetry and privacy guidance

Author: OgeonX-Ai

docs/security/telemetry-and-privacy.md

@@ -0,0 +1,32 @@
+# Telemetry and Privacy
+
+AI-OS should be privacy-first.
+
+## Principles
+
+- No telemetry by default.
+- Prefer local logs for local workflows.
+- Do not collect secrets, prompts, private code, or personal data.
+- Make any telemetry opt-in and documented.
+- Keep observability useful for debugging loops and verifier outcomes.
+
+## Observability loop
+
+```mermaid
+flowchart TD
+    Event[Loop event] --> Classify[Classify]
+    Classify --> Sensitive{Sensitive?}
+    Sensitive -- Yes --> Redact[Redact or drop]
+    Sensitive -- No --> Record[Record metric]
+    Redact --> Record
+    Record --> Review[Review usefulness]
+```
+
+## Useful metrics
+
+- loop count
+- verifier pass rate
+- time to recover
+- docs drift
+- release readiness
+- model escalation count