The latest tagged alpha is the only supported line until a stable release exists.

Please use GitHub private vulnerability reporting for this repository. Include the affected contract or command, a minimal reproducer, impact, and any proposed mitigation. Do not place secrets, production evidence, tenant data, or exploit details in a public issue.

The project validates contracts and runtime evidence. It does not provide a sandbox, identity provider, credential store, signature service, network boundary, or regulatory certification. Review the threat model before integrating effectful capabilities.