This is a development beta. Only the current main branch is maintained; there is no audited release or guaranteed response time. See local service security for current protections and limits.

Use GitHub's Report a vulnerability option to contact the maintainer privately. Do not publish security details in a public issue. Remove credentials, private recordings and conversations from evidence. If the reporting option is unavailable, request a private contact channel from BambiOS before sending technical details.

Include the affected commit, operating system, a short description, the impact and minimal reproduction steps using dummy data.