Security reports may concern canonicalization, artifact identifiers, reference-graph integrity, evidence provenance, privacy boundaries, denial of service, or ambiguity that could cause incompatible security behavior.

The current repository is experimental research. A report should distinguish protocol-design risk from a vulnerability in the reference verifier.

Do not open a public issue containing secrets, personal information, private model traces, or exploitable deployment details.

Use the repository's private security-advisory reporting channel:

https://github.com/MasonMash/MSB/security/advisories/new

Include the affected file or component, reproducible conditions, potential impact, and a proposed mitigation when available.

Only the current main branch is actively reviewed. No production-security guarantee is made for the experimental protocol or reference implementation.