Security policy

Reporting a vulnerability

Please report security problems privately using GitHub's "Report a vulnerability" button on the Security tab of this repository. Please do not open a public issue for a security problem.

We will do our best to acknowledge your report promptly, keep you updated, and credit you in the release notes if you wish.

What we consider in scope

The installer, the ownllm command, the package build, and the pinned manifests. Problems inside the third-party engine or models should also be reported to those projects.

Supported versions

The latest release.

Our commitments

No secrets in this repository; every release file has a published SHA-256; your prompts and usage are never sent anywhere.