Do not publish credentials, private transcripts, exploit details, or personal information in public issues or pull requests.

Private vulnerability reporting is enabled. For a confidential report, use Report a vulnerability on this repository's Security page. This sends the report privately to the repository maintainers rather than opening a public issue.

A useful report identifies the Gantry version and build, the affected behavior, a minimal reproduction using synthetic data, and the potential impact. Do not attach real agent credentials, unredacted diagnostics, or crash dumps containing private paths.

Releases are distributed through this repository's Releases page. Check the published SHA-256 before opening a download. A checksum verifies bytes, not notarization or publisher identity. Gantry 1.1.0 is ad-hoc signed and not notarized by Apple.