JoVault is an experimental compiler, register VM and signed-checkpoint project. Its current trust boundaries and limitations are in compatibility and architecture. Full ECMAScript support and production security assurance remain unestablished.

Use GitHub private vulnerability reporting if the repository offers it. Otherwise contact the repository maintainers through an existing private GitHub channel. If none is available, request a private contact without posting vulnerability details, exploit code, credentials or application data in an issue. Include the source revision, runtime image hash, reproduction steps and expected behavior when a private reporting channel is established.