Security

Report a vulnerability privately through GitHub's advisory channel, never in a public issue: https://github.com/1-3-7/disrobe/security/advisories/new. Include a description and its impact, a minimal reproducer (input bytes, command line, expected and observed behaviour), the disrobe --version output, and your OS and architecture.

The full policy lives in SECURITY.md: supported versions, response times, what is in and out of scope, the hardening posture, the attack-surface inventory, and how to verify release signatures.