The public GitHub release line starts at v2.0.0.

Security fixes are handled on the latest released version unless a separate support window is announced in a release note.

Please report security issues privately through GitHub Security Advisories for gix9303/Eve.

Do not open a public issue for suspected vulnerabilities involving capability boundaries, host effects, release artifacts, or generated target behavior.

Eve does not execute arbitrary model-authored host-language code. Host effects must pass through declared capability boundaries, policy checks, receipts, checkpoints, and replay evidence.