Repository navigation

Security

Report a vulnerability

SECURITY.md

Security Policy

Reporting a Vulnerability

Please do not open public issues for security vulnerabilities.

For now, report privately to the repository owner with:

affected command/module
reproduction steps
impact assessment
suggested mitigation (if available)

Response Expectations

Initial acknowledgment target: within 7 days
Triage/update target: within 14 days

Scope Notes

Security-sensitive areas include command execution policy, schema validation, logging integrity, and quarantine/replay flows.

There aren't any published security advisories