Only the latest commit on main is supported. Fixes are made forward on main; older commits and branches do not receive security updates.

Please report vulnerabilities privately. Do not open a public issue, pull request or discussion for a security problem.

Email security@rodgersintelligence.com with:

• a description of the issue and its impact,
• steps or a minimal input to reproduce it,
• the commit hash you tested against,
• any suggested fix, if you have one.

You will get an acknowledgement after the report is read. Please keep the details private until a fix is on main and we have agreed on disclosure timing.

In scope: code in this repository (deviatrix_genesis/, mcp/, CI workflows). Out of scope: third-party dependencies (report those upstream) and anything that requires access you were not given.