We take the security of WARM seriously. If you believe you have found a security vulnerability, please do not open a public issue.

Please report vulnerabilities by:

• Opening a draft security advisory on GitHub
• Contacting the WritersLogic security team at security@writerslogic.com

We will acknowledge your report within 48 hours and provide a timeline for a fix if applicable.

• All dependencies are audited with cargo-deny
• CI runs cargo clippy with -D warnings
• Apache-2.0 licensed with full provenance tracking