Please do not report vulnerabilities, credentials, or private session content in a public issue. Email the maintainer at hesham.karam@gmail.com with the subject "agentd-protocol security report".

Include the affected version or commit, connection mode, impact, and minimal reproduction steps using a disposable project. Do not send live credentials, pairing QR codes, private keys, or customer data. Coordinate any sensitive reproduction material privately before sending it.

Security fixes target the current development line. There is no published long-term-support or response-time guarantee. Review release notes and test compatible component versions before upgrading.

Protocol types do not authenticate callers or encrypt data by themselves. Applications must validate input and enforce their own transport boundaries.