Security policy

Please do not publish a working exploit, credential, pairing link, session content, hostname, or device store in a public issue.

For a suspected vulnerability, use GitHub private vulnerability reporting on ruby1304/dsh-remote. Include the affected version, deployment shape, expected boundary, observed result, and a minimal redacted reproduction.

Supported releases receive security fixes. Pre-release builds are supported only for coordinated testing.