Use GitHub private vulnerability reporting. Do not post vulnerabilities, credentials or sensitive receipts in public issues. Include affected CLI/SDK versions, platform, a minimal reproduction, impact and a proposed fix when available. Use synthetic data and redact secret values.

This early project focuses fixes on current main and the latest release, currently 0.5.0 (CLI v0.5.0 and @9l/playwright 0.5.0, which share one version). Older releases and development snapshots have no separate security maintenance commitment.

The runner executes test code with the local user's permissions. It is not a sandbox for untrusted tests. Browser activity can reach the network and mutate the selected application; use approved targets and isolated test data.

Only explicitly named application environment keys are forwarded with --pass-env. Provider credentials belong in Go's calling environment, never in browser settings, command arguments, goal text or published evidence. Diagnostics and receipts are bounded and sanitized; page content and attachment bodies are omitted by default. See the SDK evidence contract and goal policy for the exact boundaries.