Security fixes are applied to the current main branch. This project is still an incremental-backup prototype; evaluate it carefully before production use.

Please report suspected vulnerabilities through a private GitHub security advisory at https://github.com/Wave7t/datavault/security/advisories/new. Do not disclose vulnerabilities in public issues, discussions, pull requests, or commits before a fix is available.

Include a minimal reproduction, affected revision, impact assessment, and any safe mitigation you have identified. Never include private keys, backup data, live credentials, SSH-agent sockets, or production configuration files.

We will acknowledge the report, assess impact, and coordinate disclosure and a fix through the private advisory.