This repository is a research prototype. Its model-generated code adapter is not a hardened isolation boundary, and the project is not intended to process untrusted workloads or production secrets.

Security fixes are maintained on the default branch only. Historical experiment artifacts and upstream services are outside this repository's support scope.

Please report a suspected vulnerability through GitHub's private vulnerability reporting flow for this repository. Do not include credentials, private prompts, or user data in a public issue.

Include the affected commit, a minimal reproduction, expected impact, and any safe mitigation you have identified. No bug-bounty program or authorization to test third-party systems is implied.