# Security policy

MoonPermit is pre-1.0 research software. Please report suspected security
issues privately to the repository owner through GitHub's security-advisory
interface rather than publishing exploit details in a public issue.

Read `docs/threat-model.md` before relying on the project. In particular,
MoonPermit is not an operating-system sandbox or a production cryptographic
credential system, and complete mediation by the host is required.