Please do not open a public GitHub issue for security problems.
Report vulnerabilities privately through GitHub Security Advisories:
- Go to https://github.com/The-AI-Alliance/tapestry/security/advisories/new (the "Report a vulnerability" button on the repository's Security tab).
Please include:
- A description of the vulnerability and its potential impact
- Steps to reproduce
- The affected branch, commit, or component (e.g.
src/tapestry/...,contrib/...) - Suggested fixes, if any
Maintainers will acknowledge your report and respond as soon as possible. Please allow reasonable time for a fix before any public disclosure.
Project Tapestry is pre-release: there are no supported release versions yet.
Security reports are evaluated against the develop
integration branch and main.
- Security & Privacy work group — privacy tiers, secure aggregation, threat models, and safety-preservation constraints for consortium training.