VaultLayer handles local knowledge-base indexes and can touch sensitive vault paths. Treat privacy issues as security issues.

Only the latest main branch is supported during the pre-1.0 phase.

Open a private security advisory on GitHub if available, or contact the maintainer privately before publishing details.

Never include private vault content, generated DB/index files, embeddings, tokens, or environment dumps in public issues.