This project is in Beta. Only the latest release is "supported" for security updates. Commits to main after the latest release should be considered a work in progress; we still welcome quality reports related to those changes, but may already be aware of issues with them.

Please submit security issues to Security Advisories for this repo. Note that maintenance of this project is largely ad-hoc as other work duties allow, so full triage may normally be delayed weeks or months depending on the apparent severity of the issue.

If you are using AI to find or report a vulnerability, please have your AI actually verify it as a true positive dynamically and document reproducible steps for doing so, preferably within the provided Docker demo environment. Reports that are clearly AI-generated based only on static analysis may be delayed or ignored.