BootCanvas is an experimental hobby kernel, not a secure or production-ready operating system. It runs with direct hardware access and has very limited protections. Don’t use it for sensitive data or on systems you can’t afford to disrupt.

I’m not actively maintaining the project, so I can’t promise a fix or a response time for security reports.

If you find a security issue, please don’t post details in a public issue. Use GitHub’s private vulnerability reporting for this repository if it’s available. Otherwise, contact me privately through GitHub. Include the affected code or behavior and steps to understand the issue, but avoid sharing anyone else’s private data.