If you discover a security vulnerability in agent-tool-firewall, please report it responsibly:

1. GitHub Security Advisories (preferred): Report a vulnerability
2. Email: Open a GitHub Security Advisory (no public email for now).

Do not open a public GitHub issue for security vulnerabilities.

• Acknowledgement: You will receive an acknowledgement within 48 hours of your report confirming receipt.
• Critical fixes: Critical severity vulnerabilities (e.g., policy bypass, authentication bypass) will be patched within 7 days of confirmation.
• Coordinated disclosure: We follow coordinated disclosure. We ask reporters to avoid public disclosure until a fix is available and a reasonable disclosure window (typically 90 days) has passed.
• Credit: Security researchers will be credited in the release notes and CHANGELOG unless they request anonymity.

• Policy evaluation logic (allow/deny, path matching, argument validation)
• Rate limiting bypass
• Path traversal or null-byte injection bypass
• Authentication bypass on /v1/reload
• Audit log injection or tampering
• Denial of service via crafted requests

• Vulnerabilities in Go standard library or gopkg.in/yaml.v3
• Issues in container base images (Alpine, Go)
• Deployment misconfigurations (running as root, exposing to public network)

Only the latest release on the main branch receives security fixes. Pre-release builds and older tags are not supported.