The 0.1.x series is pre-1.0. Maintainers assess reports against the current default branch and the latest published release listed on GitHub Releases.

Use this repository’s GitHub Security → Report a vulnerability facility when private vulnerability reporting is enabled. If that facility is unavailable, contact the maintainer privately at wolf@wolfmcnally.com. Do not post credentials, private data, real-store contents or an unpatched exploit in a public issue. Include affected version, platform, a minimal disposable reproduction and expected impact.

Castle’s local excision receipt does not prove physical erasure or deletion of original inputs, other replicas, backups or filesystem snapshots. Protect store directories with appropriate filesystem permissions and serialize destructive operations as documented. Cloud replication is not implemented.