KineGrant is an experimental protocol and reference implementation. It has not received an independent security audit and must not be the sole safety control for real machinery.

The working threat model is documented in THREAT_MODEL.md.

The reference implementation aims to provide, and reviewers are invited to challenge:

• Fail-closed / default-deny. Anything not explicitly allowed is denied.
• Request-bound, short-lived capabilities. A capability authorizes one specific request and expires (maximum lifetime 300 seconds).
• Replay protection. A capability is consumed exactly once.
• Tamper-evident audit. Receipts form a signed hash chain.
• Deny-overrides policy. A deny rule outranks an allow rule.

Please do not publish an exploitable vulnerability before maintainers have had a reasonable opportunity to assess it. Until a dedicated security mailbox is listed at https://kinegrant.com, open a GitHub Security Advisory for this repository. Include:

• the affected version and component;
• the security property that fails;
• a minimal reproducer or test case;
• likely physical and privacy impact;
• any proposed mitigation.

Do not include private keys, personal data, or access to real devices. Reports about bypassing the action gate, signature validation, request binding, replay protection, revocation, adapter fail-open behavior, or receipt integrity receive the highest priority.

Commits and tags authored by the maintainer are SSH-signed (ssh-ed25519). You can verify a tag with:

git verify-tag v2.65.4

If verification fails, do not trust the artifact: it may have been tampered with or repackaged by a third party.

Security fixes land on the default branch first and are backported to the current stable release when the change is small and safe to backport.

• The default branch is always supported.
• The latest 2.x release is the current stable line (see the releases page).
• Earlier releases are experimental drafts and are not supported. They may change or break without notice and must not be used as the sole safety control for real machinery.