This policy covers every aien-dev repository that has no SECURITY.md of its own. A repository's own policy takes precedence.
Report privately. Do not open a public issue, pull request or discussion about it.
- GitHub: open the repository's Security tab and choose Report a vulnerability. This creates a private advisory that only the maintainers can see.
- Email: aien@aienos.com
Please include the repository, the commit or version, the steps to reproduce, and what an attacker could do with it. If the report involves a secret, describe where it was exposed; do not send the secret itself.
The AIEN repositories are research-grade, pre-alpha software. No public release exists yet, so there are no supported versions; reports are handled against main.
- A flaw in INTERPLANE, the interoperability protocol, belongs to interplane.
- If you are unsure which repository is affected, report it on the one you found it in, or by email.