ma-workflow-engine is early-stage software built by the team at Quantum Orbit Labs (https://quantumorbitlabs.com). The current release contains a database schema and pure domain functions. It exposes no network services, stores no credentials and ships no authentication layer; those arrive with the API layer on the roadmap.

Report vulnerabilities privately through GitHub Security Advisories: open the Security tab of this repository and choose "Report a vulnerability". Do not open a public issue for security reports.

We review every report, respond through the advisory thread and credit reporters in the fix release unless they prefer otherwise.

Only the latest 0.x release receives security fixes.

• audit_log is append-only by design. In managed environments, grant only INSERT and SELECT on it.
• documents stores metadata and a SHA-256 content hash; file bodies are never written to the database.
• All sample and test data in this repository is synthetic.