Report vulnerabilities privately through GitHub security reporting. Include the affected version, reproduction steps, and expected impact.

Do not post passwords, API keys, private keys, or private session content in public issues.

Security fixes target the latest validated stable release. Keep Talaria and Hermes Agent updated; use HTTPS when accessing Talaria over an untrusted network.