The KAI Resource Management API maintainers take security seriously and appreciate responsible vulnerability disclosure.

The project has not published its first release. Until a release and support policy exist, security fixes are applied only to the main branch.

Do not report security vulnerabilities through public GitHub issues.

Report vulnerabilities privately through GitHub Security Advisories.

Include:

• A description of the vulnerability and its impact.
• Reproduction steps or a proof of concept.
• Affected versions, commits, or configurations.
• Any known mitigations.

Allow the maintainers a reasonable timeframe to investigate and prepare a fix before public disclosure.