---
AIGC:
    Label: "1"
    ContentProducer: 001191440300708461136T1XGW3
    ProduceID: 3e9b297b16411e0e0848fc0302358070_99ae12df74a111f1986d525400d9a7a1
    ReservedCode1: 5Nxrx8E5xloFd3HvVwg5l0w08YVyPNw+nkuDGFdnYnuhg79729w0aEudW/uPqTQHZCptsYywg6UxKuDkFIYBhhhrOdJ//a8byr4zTDp8EpdLy/YhLD5gtboFD/PxgeEBhbjgwlxDLqcaXomtOCmiKsYNBHJjyKhgfwywaAoCYss/VtAJOgtNIm4jf/o=
    ContentPropagator: 001191440300708461136T1XGW3
    PropagateID: 3e9b297b16411e0e0848fc0302358070_99ae12df74a111f1986d525400d9a7a1
    ReservedCode2: 5Nxrx8E5xloFd3HvVwg5l0w08YVyPNw+nkuDGFdnYnuhg79729w0aEudW/uPqTQHZCptsYywg6UxKuDkFIYBhhhrOdJ//a8byr4zTDp8EpdLy/YhLD5gtboFD/PxgeEBhbjgwlxDLqcaXomtOCmiKsYNBHJjyKhgfwywaAoCYss/VtAJOgtNIm4jf/o=
---

# Security Policy

## Supported Versions

| Version | Supported          |
| ------- | ------------------ |
| 2.5.x   | Active development |
| 2.1.x   | Security fixes     |
| 1.7.x   | Critical only      |

## Reporting a Vulnerability

**Do NOT open a public GitHub issue for security vulnerabilities.**

Email: security@agentos.dev (placeholder — replace with actual contact)

Response time: within 48 hours.

### What to include

- Description of the vulnerability
- Steps to reproduce
- Affected versions
- Any potential mitigations you've identified

We will acknowledge receipt within 48 hours and provide a timeline for resolution.

## Security Best Practices for Users

- Always use the latest version
- Review permissions granted to agents
- Audit agent actions via the observability module
- Use the approval-based evolution system (never auto-approve high-risk changes)
*（内容由AI生成，仅供参考）*
