This repository is a compact educational reference. It is not a hosted service and does not receive security updates under a formal support SLA.

Please do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting feature for this repository when available, or contact the repository owner through the contact method listed on the Tier9AI organization profile.

Include the affected version or commit, reproduction steps, expected impact, and any suggested mitigation. Do not include real credentials, customer data, or regulated data in a report.

• The demonstration approval JSON is not cryptographically signed and does not prove identity or authorization.
• The JSONL log is append-only by convention, not immutable storage.
• SHA-256 fingerprints minimize stored content but may still reveal low-entropy values through guessing.
• The deterministic checks are examples of release gates, not a complete safety, quality, privacy, or compliance program.
• The default provider is local test code and is not representative of a production model integration.