We take security seriously. Please follow these guidelines to report vulnerabilities responsibly.

• Email: jonathansantilli@gmail.com
• Do not open public issues for suspected vulnerabilities.
• Provide reproduction details, affected versions, and impact if known.

• We aim to acknowledge in 2 business days and provide a timeline after triage.
• We may request a coordinated disclosure timeline.

• The FREE‑MAD Python package and its CLI/dashboard.
• Not in scope: third‑party agent CLIs you configure (e.g., claude, codex, zen-mcp). Report issues in those tools to their maintainers.

• Subprocesses are allowlisted and run with shell=False.
• Sandbox validator is disabled by default. When enabled it runs candidate code through exec with restricted builtins, a substring blocklist and a timeout. This is not a security boundary — treat it as a smoke check for trusted inputs only. For the evolve runtime, judge.container.enabled is the real isolation layer.
• Avoid sharing transcripts that may contain sensitive content; enable redaction patterns in config.