open_agx/SECURITY.md

Security Policy

Do not report suspected secrets or private AGX source in a public issue. Contact the repository owner privately and rotate any exposed credential immediately.

Before every release, scan the complete Git history as well as the working tree. Deleting a file in a later commit does not remove it from earlier commits.