Email contact@desplega.sh with the subject agent-swarm security report. This is the project's existing private contact channel. Please keep vulnerability details out of public issues, pull requests, and Discord until maintainers have had an opportunity to investigate.

Include the affected release or commit, deployment method, reproduction steps, expected impact, and any relevant logs with credentials and personal data removed. Use a deployment you control to reproduce the issue; do not test against other people's swarms or accounts.

Include your exact version even if it is old. Check the latest release and its release notes when assessing whether an issue has already been fixed. The project does not publish an LTS or security-backport support matrix. Maintainers will determine the affected versions and available fixes during investigation; this policy does not promise a response or remediation deadline.