No production version is supported during Phase 0. Security support begins with the first tagged pre-release and will be listed here.

Do not open a public issue for a vulnerability. Use GitHub private vulnerability reporting once enabled. Until then, contact the repository owner privately through their GitHub profile and include affected revision, impact, reproduction steps, and a suggested mitigation.

Expect acknowledgement within 7 days and a remediation plan within 30 days when feasible. Please allow coordinated disclosure.

This software produces planning data and reviewable artifacts. It does not directly control manufacturing equipment. Generated artifacts are untrusted until schema validation, rule validation, deterministic regeneration, and human release approval have succeeded. Never connect development output directly to machinery.