Only the latest main branch and the latest published release receive fixes.

Please do not disclose security-sensitive details in a public issue. Use GitHub's private security advisory flow for the repository. MemScope does not store production memory or credentials; reports involving data exposure in an integration should include the adapter and trace boundary involved.

Generated procedure code is executed only in memscope.sandbox. The default backend uses a temporary directory, a minimal environment, network-related import rejection, Python isolated mode, wall-clock timeout, and POSIX resource limits. This is best-effort local isolation and is not equivalent to a hardened container or VM. Unsupported host capabilities produce sandbox-blocked. Dataset-provided reference harnesses may use eval only through the explicit reference-evaluation path; generated model source remains subject to the stricter security scanner.