Security fixes target the latest 1.3.x candidate on main. Older archives and research prototypes are not maintained security releases.

Use this repository's private vulnerability-reporting or Security Advisory workflow, or email raushanraj1112@gmail.com. Do not open a public issue containing an exploit, credential, customer record, or proprietary dataset. Include the affected version, a minimal reproduction, impact, and any suggested mitigation.

PAIL is local-first and does not expose a public listener by default. The reference production container requires role enforcement, file-based secrets, a non-root read-only runtime, and exact token accounting. Public deployments must add organization-managed TLS, identity, key rotation, backup/restore, monitoring, and rate controls.

Reference manifests and local scans are not a substitute for an independent security review or customer-specific threat model.