Security fixes are accepted for the latest 1.x release line.

Please do not publish exploit details in a public issue before maintainers have had a reasonable opportunity to respond. Use GitHub's private vulnerability reporting when available for this repository.

AegisGraph is designed to inspect target repositories read-only. Any path that unexpectedly mutates a target, executes untrusted target code during static discovery, leaks repository contents, or converts missing evidence into a false PASS should be treated as security-sensitive.