The project is actively maintained on the default branch and latest release line.

Please report potential vulnerabilities privately using one of these channels:

1. GitHub Private Vulnerability Reporting
   • Go to the repository Security tab and use Report a vulnerability.
   • Direct link: https://github.com/axrxvm/aOS/security/advisories/new
2. Email
   • Send details to axrxvm@proton.me.

Do not open public GitHub issues for security problems.

When reporting, include:

• affected version/commit
• impact and attack scenario
• reproduction steps or proof of concept
• any proposed mitigation

• Initial acknowledgement target: within 72 hours.
• Triage and status updates are provided as fixes are prepared.
• We aim for coordinated disclosure after a patch or mitigation is available.

If you want to be credited, include your preferred name/handle in the report. Anonymous reports are also accepted.