Security updates are applied to the latest revision on main.

Please use GitHub's private vulnerability-reporting form for this repository. Do not include exploit details, credentials, or private project data in a public issue.

Include the affected revision, reproduction steps, observed impact, and any suggested mitigation. Acknowledgement and remediation timing will depend on severity and reproducibility.

PipelineGuard is a local portfolio tool, not a hosted production service. The API binds to loopback by default, and the MCP surface is intentionally read-only.