Agent Control Plane is not production-ready. Do not rely on this repository as a complete security boundary for untrusted repositories or unattended deployment. Packet-only blind reviewer egress has a measured, fail-closed provider-proxy boundary; its scope and remaining deployment evidence requirement are documented in reviewer egress. Current security-relevant blockers and residuals are visible in the open P0 tracker and status page.

Do not post credentials, private repository material, live exploit instructions, or a reproduction that reaches another person's system in a public issue. Use GitHub's private security reporting flow if the repository enables it; otherwise request a private reporting channel from the repository owner before disclosing the details.

Reports should include the affected revision, the local or external boundary involved, a minimal safe reproduction, impact, and whether the finding can cause an unsafe PASS or authoritative write. Do not claim a fix is complete without a regression test and an independent review appropriate to the boundary.