Nova is alpha, local-first software. It is not currently designed for an untrusted public network or multi-user deployment.

Please report vulnerabilities privately through GitHub's private vulnerability reporting feature rather than a public issue. Include the affected version, impact and a minimal reproduction when possible.

The main branch and latest tagged alpha receive security fixes. There is no guaranteed response time or long-term support commitment during alpha.