The 0.1.x line is the first supported public release line. Development commits on main are not releases and may change before a tag is cut.

Please use GitHub's private vulnerability-reporting / Security Advisory interface for this repository when it is available. Do not post exploit details, credentials, private session data, or other sensitive material in a public issue.

If private reporting is not available, open a minimal public issue asking the maintainer for a private contact channel; include no exploit details until a private channel is established.

Reports that can affect durable session integrity, controlled-write authority, package installation, or recovery behavior are treated as release blockers until triaged.