# Security policy

Version `0.1.x` receives security fixes while it is the current release line.

Please report vulnerabilities privately through GitHub Security Advisories for `aleleppy/leppy-loop-deepseek`. Include the affected version, platform, minimal reproduction, boundary crossed, and expected/observed behavior. Remove credentials, private source, transcripts, and personal paths.

Do not open a public issue for an unpatched credential leak, arbitrary out-of-scope write, unauthenticated process termination, or publication/deployment bypass.

The documented absence of network confinement is a known limitation, not by itself a vulnerability. A bypass of the stated path, credential, process-ownership, or denied-operation controls is in scope.