WorldCut is not a standalone security boundary. Do not use it as the sole authorization control for production side effects.

Please report vulnerabilities through GitHub private vulnerability reporting. Do not open a public issue for an undisclosed vulnerability.

Include a minimal reproduction, affected version, expected behavior, and potential impact. Reports will be acknowledged as soon as practical.

The latest 0.1.x release and the current main branch receive security updates.