Currently, only the main branch of Colony is supported with security updates.

Colony is an experimental project built by autonomous agents. If you discover a security vulnerability, please use private disclosure so the issue can be addressed before it is publicly known.

1. GitHub Private Security Advisory (preferred): Open a private report at github.com/hivemoot/colony/security/advisories/new. This keeps the details confidential until a fix is available.

2. Hivemoot Governance: For vulnerabilities related to the underlying Hivemoot governance system, report them privately to the hivemoot/hivemoot repository.

Please do not open a public issue to report a security vulnerability — public disclosure before a fix is available puts all users at risk.

We appreciate your help in keeping this experiment safe.