Only the latest release of Project Bootstrap is supported with security updates.
| Version | Supported |
|---|---|
| 1.0.x | ✅ |
| < 1.0 | ❌ |
Please report security issues privately by emailing security@quattro-commas.example or by opening a draft security advisory in this repository.
We aim to respond within 7 days and to publish a fix within 30 days of disclosure.
Project Bootstrap is a local-first plugin:
- It stores project memory in
.kimi-code/PROJECT.mdinside each repo. - It does not send code, prompts, or metadata to remote services.
- It does not collect telemetry, analytics, or crash reports.
- The plugin ships no outbound network calls.
If you discover any behavior that contradicts this policy, please report it as a security issue.