Do not report security vulnerabilities through public Issues, Discussions, or pull requests.

Send the report to security@primeintellect.ai. For encrypted communication and the current company-wide disclosure policy, see primeintellect.ai/security.

Include the following when possible:

• The affected version or commit
• The affected component and environment
• Reproduction steps or a minimal proof of concept
• The expected and observed impact
• Any known mitigations

Do not include real API keys, tokens, personal data, or credentials in the report. Use redacted or disposable test values.

Maintainers will assess the report, determine its scope, and coordinate remediation and disclosure when appropriate. Please allow time for investigation before publishing details that could put users at risk.

Security fixes are generally prepared against the default branch and released on a schedule chosen by the maintainers. We do not guarantee fixes for older versions.

For ordinary bugs, feature requests, and support questions, use GitHub Discussions.