If you discover a security vulnerability in Froglet, please report it responsibly by emailing security@armanas.dev.

Please include:

• A description of the vulnerability and its impact
• Steps to reproduce or a proof-of-concept
• The affected version(s)

We aim to acknowledge reports within 48 hours and will work with you to understand and address the issue before any public disclosure.

This policy covers the Froglet protocol implementation, reference node binaries, and the OpenClaw/MCP integrations shipped in this repository.

Only the latest release on the main branch is actively supported with security fixes.