Skip to content

Security: quantifylabs/aegis-memory

Security

SECURITY.md

Security Policy

Supported Versions

Version Supported
2.4.x
< 2.4

Reporting a Vulnerability

Aegis Memory is security-critical infrastructure — context is the attack surface, so we take reports seriously.

Please do not open public issues for security vulnerabilities.

Report privately via either:

Include: affected version, reproduction steps, and impact assessment.

Response Timeline

  • Acknowledgement within 72 hours
  • Initial assessment within 7 days
  • Coordinated disclosure once a fix is available

For deeper security architecture (4-stage content pipeline, HMAC-SHA256 integrity, OWASP 4-tier trust hierarchy), see docs/guides/security.mdx.

There aren't any published security advisories