The latest minor release of autonomyproof receives security fixes.

Email security@autonomyproof.io with a description, reproduction steps, and impact. Please do not open public issues for security reports.

We aim to acknowledge within 3 business days and to ship a fix or mitigation within 30 days for confirmed high/critical issues. We will credit reporters unless anonymity is requested.

autonomyproof-cli never uploads source code. The scanner is read-only and must never modify files it scans. If you find behavior that violates either property, treat it as a security vulnerability and report it privately.