MAP Core is an early reference prototype. It does not yet implement all of the security controls required by the specifications, including production package signature verification and authenticated network transport. Do not use the prototype to execute untrusted agents in production.

Please use GitHub's private vulnerability reporting for this repository. Do not open a public issue for a vulnerability that has not been disclosed.

Include the affected revision, environment, reproduction steps, expected impact, and any suggested mitigation. You should receive an acknowledgement within seven days. Disclosure timing will be coordinated after the report has been assessed and a remediation plan exists.

Until the first tagged release, only the current main branch receives security fixes.