Deployment Airlock is a barrier between an AI agent and your servers. A way around it — an upload or download that happens without the confirmation it should require, a path outside the agent's zone that gets through, a plan that can be altered after it was shown — is a vulnerability.

Please report it privately by email to prihod2004@gmail.com, not in GitHub Issues, and include the IDE and Airlock versions and the steps to reproduce. Once a fixed version is published, the issue can be discussed openly.

Behaviour the documentation already lists under what Airlock does not control is not a vulnerability, but a bug report is still welcome if the documentation is unclear.