Security fixes are applied to the latest release on the default branch.

Please report suspected vulnerabilities privately to the repository owner. Do not include live API keys, private traces, customer data, or exploit payloads in a public issue.

The bundled scenarios are synthetic. The project does not require network access or credentials. If you adapt it to production agent traces, redact secrets and personal data before storage.