Harness Axis 0.1.x is an executable read-only alpha. The current line receives engine, skill, installer, evidence-integrity, documentation, and repository-security fixes on main. It is not production-certified and live mutation is not supported.

Please use GitHub private vulnerability reporting for this repository. If that feature is unavailable, contact the repository owner through the private contact method on the Youki Studios GitHub profile. Do not open a public issue containing secrets, private vault material, exploit payloads, or third-party source.

Include:

• affected path or artifact;
• impact and preconditions;
• minimal reproduction using synthetic data;
• whether target mutation, code execution, path escape, privacy leak, evidence tampering, or false completeness is involved.

• acknowledgement within 5 business days;
• initial severity assessment within 10 business days;
• coordinated remediation and disclosure for confirmed issues.

• target mutation during an allegedly read-only run;
• target-controlled code execution;
• path or symlink escape;
• secret/private-identity disclosure;
• evidence or score tampering;
• malicious release artifact;
• materially false complete-coverage claim.

This policy is not a production certification or warranty.