CogPrime is currently in alpha development. Security updates are provided for the latest version.
| Version | Supported |
|---|---|
| 0.1.x | ✅ |
| < 0.1 | ❌ |
If you discover a security vulnerability in CogPrime, please report it responsibly:
- Do not open a public GitHub issue for security vulnerabilities
- Email the maintainers at d@rzo.io with details of the vulnerability
- Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Any suggested fixes (optional)
- Initial Response: Within 48 hours of report
- Status Update: Within 7 days with assessment
- Resolution: Varies based on severity and complexity
- Acknowledgment of your report
- Regular updates on progress
- Credit in security advisories (unless you prefer anonymity)
- Notification when the issue is resolved
CogPrime is an AGI research project. When deploying or extending:
- Review cognitive module outputs before use in production
- Implement appropriate safeguards for autonomous operation
- Monitor system behavior for unexpected patterns
- Follow responsible AI development practices
- Keep dependencies updated to address known vulnerabilities
- Review third-party integrations (mem0, LLM providers) for security
- Use virtual environments to isolate dependencies
- Avoid storing sensitive data in AtomSpace without encryption
- Configure LLM API keys securely using environment variables
- Review memory persistence settings for data retention policies