Security Policy

Reporting a Vulnerability

Please do not open a public issue for security vulnerabilities.

Use GitHub private vulnerability reporting:

https://github.com/EverMind-AI/Raven/security/advisories/new

Include:

• affected version or commit;
• a minimal reproduction;
• impact and affected component;
• logs or screenshots with secrets redacted;
• any known workaround.

We will acknowledge validated reports and coordinate remediation before public disclosure when appropriate.

Supported Versions

Raven is pre-alpha. Security fixes target the default branch first. Release branch support will be documented once public releases are cut.