complyee-agent-guard sits in front of tools that act on real systems, so we treat any way to make a tool run without a valid grant as a security issue.

Please do not open a public issue. Use GitHub's private vulnerability reporting (Security → Report a vulnerability) on this repository. We aim to acknowledge reports within three working days.

Only the latest released minor version receives security fixes while the package is below 1.0.