# Security Policy

## Supported versions

Security fixes are applied to the latest release on `main`.

## Reporting a vulnerability

Please do not open a public issue for secrets exposure, authentication bypass, cross-origin request problems, prompt-to-Host boundary violations, or unsafe persistence behavior.

Use GitHub's private vulnerability reporting on this repository. Include the affected version, reproduction steps, impact, and any proposed mitigation. You should receive an acknowledgement within seven days.

## Security boundaries

- The plugin registers one exact authenticated DSH Connection route.
- No credentials are read or stored by the plugin.
- Model output is treated as untrusted JSON and validated before use.
- Browser persistence is bounded and scoped by Session and message identity.
- The plugin does not invoke tools or mutate workspaces.