Security fixes target the current main branch. Historical research and generated artifacts are preserved as records and may not receive retroactive correction.

Do not open a public issue for a suspected vulnerability. Use GitHub’s private vulnerability reporting when enabled; otherwise contact the repository owner through the private route listed on their GitHub profile. Include the affected commit and path, prerequisites, minimal reproduction, impact, and suggested mitigation. Remove tokens and unnecessary personal data.

Maintainers should acknowledge a report within 7 days and provide a triage update within 14 days when capacity permits. These are service targets, not guarantees. Coordinated disclosure timing is agreed case by case.

Axiom is a reference implementation, not a sandbox or authorization system. Callers must enforce identity, authorization, quotas, network and filesystem isolation, and secret handling. Logs expose event types and timestamps only; never log prompts, credentials, raw tool output, or private payloads by default.

GitHub workflows use least-privilege job permissions, immutable action SHAs, and no pull-request code with write credentials. Dependency updates require passing tests and human review.