ART v0.1 is primarily a research-text repository. If future reference implementations, validators, registries, or cryptographic test tools are added, security reports should not be filed publicly when they could enable exploitation.

For non-sensitive research or interoperability issues, use GitHub Issues.

For vulnerabilities in future software, use GitHub's private security advisory mechanism for this repository when available.

ART documents may discuss authorization, evidence, verification, and accountability. Nothing in the theory should be interpreted as a security guarantee for a concrete implementation.

A protocol-valid record does not by itself prove external truth, legal authority, or the absence of compromise.