The AgentGuard team takes the security of agentic sandboxes seriously. If you believe you have discovered a vulnerability, sandbox escape, or bypass mechanism in AgentGuard:

1. Do not disclose the issue publicly (e.g., in GitHub issues or public forums).
2. Please submit a confidential report by emailing security@agentguard.dev or by creating a private Security Advisory on GitHub.
3. Include:
   • Detailed description of the vulnerability or sandbox bypass.
   • Minimal reproduction script or agentguard.yaml configuration.
   • Expected vs actual behavior.
   • Impact assessment.

We will acknowledge receipt within 48 hours and work with you to triage and release a patched version.