This project is currently in active prototype development. Security fixes will be applied on the latest mainline development version.
Please do not open a public GitHub issue for sensitive security problems.
Please report sensitive security issues through GitHub Security Advisories / private vulnerability reporting when available. Do not open a public issue for vulnerabilities.
When reporting, include:
- affected version or commit
- reproduction steps
- impact summary
- any proof-of-concept details needed to verify the issue
Please use extra care around:
- keychain access
- local config loading
- scheduler-triggered execution
- AI provider credentials
- release signing and notarization credentials
- shell or filesystem operations