Only the latest tagged release is supported during the pre-1.0 period.

Do not open a public issue for a vulnerability that could expose repository contents, credentials, or proof inputs. Contact the maintainer through the private security-reporting channel configured on the GitHub repository after publication.

Do not include live secrets or third-party private code in a report. A minimal synthetic reproduction is preferred.

ProofKit:

• performs no network requests;
• does not execute command strings stored in receipts;
• accepts proof inputs only inside the selected repository root;
• rejects symlinks as proof inputs;
• treats receipts as integrity evidence, not a security attestation.