Reporting a security issue
Please report suspected vulnerabilities privately to security@sealbridge.dev. Include the affected version or commit, reproduction steps, impact and any suggested mitigation. Do not include private keys, credentials, live invite tokens or private task payloads. Use synthetic examples where possible.
Avoid public issues for unpatched vulnerabilities. The maintainer will review the report and coordinate disclosure; no response-time guarantee is promised. For the threat model and isolation boundaries, see the security model and security proofs.
General questions: hello@sealbridge.dev. Invite-page questions: hello@sealbridge.app.