Security Policy

Read the Isolation Model for the intended boundaries and residual risks.

Report a Vulnerability

Do not open a public issue for a suspected vulnerability. Report it privately to security@silitics.com with:

• The affected Tascarrel version and host platform.
• The workspace features required to reproduce the issue.
• A minimal reproduction or clear sequence of actions.
• The impact you observed and any suggested mitigation.

Use the public issue tracker for non-sensitive reliability and usability problems.