We actively provide security patches and updates for the following versions:

We take the security of TidyFactor Skill Architect and its governance workflows seriously. Please do not report security vulnerabilities via public GitHub issues or discussions.

1. Private Reporting:

   • Open a private security advisory through GitHub Security Advisories.
   • Alternatively, email [email protected] or [email protected].

2. Details to Include:

   • Description of the vulnerability and attack vector.
   • Exact reproduction steps or test scenario.
   • Potential impact on downstream skills and agent workflows.

3. Response SLA:

   • Acknowledgement within 48 hours.
   • Coordinated disclosure and patch release in accordance with standard SemVer rules.