This project has no released package yet. Security reports for main and open pull requests are welcome.

Do not post exploit details publicly.

If GitHub private vulnerability reporting is available for this repository, use it. Otherwise, open a minimal issue saying you have a vulnerability report and request a private contact path.

Please include:

• Affected files, commands, or package version if known.
• Steps to reproduce, with sensitive details redacted.
• Expected impact.
• Any safe workaround.

Pi SubAgent Kernel targets a Pi extension package. It is planned to enforce agent-harness permissions, but it is not a hardened OS sandbox.