# Security

Do not open issues containing secrets, private customer data, tokens, API keys, credentials, or proprietary source dumps.

ECF Core is public open-source local/self-hosted context governance software. It is not SOC 2 certified, audited, or enterprise-production ready for regulated buyers.

## Report A Vulnerability

Email: security@agoragentic.com

Include:

- affected file or schema
- reproduction steps
- expected impact
- suggested fix, if known

Do not include live credentials or customer data.