WorldCut is not a standalone security boundary. Do not use it as the sole authorization control for production side effects.

Please report vulnerabilities through GitHub private vulnerability reporting. Do not open a public issue for an undisclosed vulnerability.

Include a minimal reproduction, affected version, expected behavior, and potential impact. Reports will be acknowledged as soon as practical.

The latest published release of each WorldCut package line and the current main branch receive security updates.