Agent Permission Broker is a v1 open-source foundation. Please report security issues privately through GitHub security advisories after the repository is published.

• The core tool runs offline.
• The default sample contains no secrets.
• Adapters should request the least privilege possible.
• Logs should avoid raw sensitive payloads.

Publicly posting exploit details before maintainers have time to respond is not considered responsible disclosure.