› cavi-ai/
Menu

/security

Security

How to report a vulnerability in a CAVI-AI project, and how releases reach this site.

Report a vulnerability

Report privately, never in a public issue. Use Security → Report a vulnerability on the affected GitHub repository, or email zigzagzig@agentmail.to with “Security” and the repository name in the subject.

What to include

  • The affected repository and its version or commit.
  • The issue and its impact.
  • Steps to reproduce, with a minimal proof of concept if possible.
  • Any suggested fix.

Please allow a reasonable window for a fix before any public disclosure.

Release integrity

This site publishes documentation only from release assets whose SHA-256 matches the release, and links every release to its source commit. The Secure Agent macOS app is signed with a Developer ID certificate and notarized by Apple, as its release notes (opens in new tab) record.