This is the security policy for Safire (Safe Artificial Intelligence for Reliable Environments), previously published as praeses-med.

• v1.x: supported

Please report vulnerabilities privately through your secure disclosure channel (e.g. a private GitHub Security Advisory on this repository). Do not open public exploit details in issues or pull requests.

We will acknowledge receipt within a reasonable window and coordinate a fix and disclosure timeline with the reporter.

• Prompt-injection shielding
• Entropy stego detection
• Drift monitoring
• Kinetic dry-run response hooks
• Immutable HMAC-signed audit trail
• Dual SBOM generation (CycloneDX + SPDX)

• Set SAFIRE_HMAC_SECRET in production. The legacy ROBUSTMED_HMAC_SECRET variable is still honored as a fallback for existing deployments.
• Store audit logs on an append-only volume.
• Run the container as a non-root user with a read-only filesystem.
• Apply a restrictive seccomp / AppArmor profile in production.