# Security Policy

Tent controls which project context an agent may read or write. Permission-boundary bugs should therefore be treated as security issues.

## Supported Versions

| Version | Supported          |
| ------- | ------------------ |
| 0.1.x   | Yes                |

## Reporting a Vulnerability

Please use GitHub private vulnerability reporting: open the repository's Security Advisories page and choose "Report a vulnerability." Do not open a public issue for security reports.

Include a minimal reproduction, affected version or commit, and the expected and actual readable/writable scope. Do not include real vault contents, credentials, manifests, or private workspace paths in a report.
