Skip to content

Security policy

The full security policy lives in the repository. It covers the supported versions and the private disclosure process:

SECURITY.md on GitHub

Please do not open a public GitHub issue for security vulnerabilities. Follow the private disclosure process described in the policy above.

  • Safety model: the approval flow, the audit hash chain and the Oracle redaction. They keep soc-ai read-only by default and your network data on your premises.
  • Architecture: the trust boundaries and the audit pipeline.