Helm (ainumbers-helm) is a self-installed, loopback-only control plane. Report suspected vulnerabilities privately — do not open a public issue. Use GitHub Security Advisories (private report) or email.

Disclosure contact: security@postoaklabs.com

Please include:

• Affected component (hub/, ui/, schema/, scripts/)
• Reproduction steps or PoC
• Impact assessment

This is a solo/small-maintainer project, not a funded security team — no response-time commitment is made here. We read every report and respond as soon as we can.

• Confirmed vulnerabilities are published as GitHub Security Advisories on this repo once fixed

Full policy, scope, and safe-harbor terms: https://ainumbers.co/security.html