The latest tagged release receives security fixes.

Do not open a public issue for a vulnerability that could damage hardware, expose secrets, or create a practical exploit. Use GitHub's private vulnerability reporting for this repository.

Include:

• the affected RigLoom version and commit;
• the smallest build JSON that reproduces the issue;
• the expected safe behavior;
• the actual behavior and exit code;
• whether the issue could recommend a voltage-mismatched or overloaded connection.

A false safe result is treated as higher severity than a false warning. Fixes must add a regression fixture and preserve fail-closed behavior.

RigLoom never probes hardware, changes firmware, controls fans, or writes BIOS settings.