The current main branch and the latest published prerelease receive security triage while the project is an MVP. Older prereleases may not receive fixes.

Please do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting feature for KayzenRoot/hiveforge when available. If it is unavailable, contact the repository owner privately through GitHub with reproduction steps, impact, and a safe contact method.

Do not include real credentials, tokens, personal data, or production secrets in reports. Redact them before sending.

We will acknowledge receipt when practical, investigate reproducible reports, and coordinate disclosure after a fix or mitigation is available. This repository is not production-ready; deployment or production credentials must not be used with the MVP without a separate security review.