Security

SECURITY.md

Security Policy

Supported Versions

Version	Supported
0.1.x	✅

Reporting a Vulnerability

If you discover a security vulnerability within this project:

Do NOT open a public issue.
Email details and reproduction steps to timfromhcs@users.noreply.github.com.
Provide reasonable time for remediation before any public disclosure.

Security Practices in this Repository

Never Commit Secrets: All API tokens, access credentials, and keys must remain in untracked local .env files.
Local Isolation: The inference engine and proxy default to binding to 127.0.0.1 / localhost only. Do not expose unauthenticated proxy endpoints to public networks.

There aren't any published security advisories