The protocol is pre-production. Security fixes apply to the current main
branch. No release currently receives long-term support.
Do not open a public issue.
Use GitHub private vulnerability reporting for this repository. If that
channel is unavailable, email security@prismnetwork.tech with the affected
version, reproduction steps, impact and required prerequisites.
The crate authenticates protocol messages and encrypts short-lived credential values. It does not:
- Establish node or supplier trust.
- Attest GPU execution.
- Provide confidential computing.
- Enforce transport freshness, authorization or replay storage.
- Verify onchain settlement by itself.
Callers must enforce sequence, nonce, expiry, account, node and lease bindings. Private keys must be generated and stored outside application logs and repository configuration.