Rúnar is a compiler that emits on-chain Bitcoin SV Script — the locking scripts it produces directly control real funds. We take security reports seriously and appreciate responsible disclosure.

Once 1.0.0 ships, security fixes land on the 1.0.x line.

Please report security issues privately — do not open a public GitHub issue.

• Preferred: GitHub Security Advisories (Security → Advisories → "Report a vulnerability").
• Email: siggi.oskarsson@gmail.com

If you can, include a minimal reproduction (source contract + the offending output) and the affected tier(s) and version.

Because the output of this project controls money, the following are in scope and especially valued:

• Compiler miscompilations — any case where a frontend/codegen pass emits Bitcoin Script that does not faithfully implement the source contract (e.g. a spending path that should be guarded but isn't, stack underflow/overflow, an assert/checkSig/checkPreimage that can be bypassed). This includes divergence between the seven compiler tiers (TypeScript, Go, Rust, Python, Zig, Ruby, Java) for the same source.
• SDK signing / wire-protocol bugs — flaws in transaction construction, BIP-143 sighash computation, canonicalJson serialization, or the signEnvelope/verifyEnvelope signed-broadcast protocol that could produce invalid signatures, accept a forged envelope, or diverge across the seven deployment SDKs.
• Cryptographic-primitive flaws — incorrect codegen for hash, EC (secp256k1 / NIST P-256 / P-384), WOTS+, SLH-DSA, BLAKE3, or related primitives that weakens or breaks the on-chain check.

Rúnar carries a Lean formal-verification effort (runar-verification/), but it is deliberately scoped. It proves observational (accept/reject) agreement for the back half of the pipeline — ANF IR → Stack IR → peephole → emit → bytes → parse → execute — modulo 70 codegen axioms (textbook crypto semantics and per-primitive codegen→runtime bridges). The frontends (the nine source-format parsers, validation, typecheck, and ANF lowering) are out of scope of the proof.

Rúnar is not "formally verified end to end." For the precise, machine- checked trust boundary — what is proven, what is axiomatized, and what is deferred — see runar-verification/TRUST_MANIFEST.md. A vulnerability inside the verified back half, or in a relied-upon axiom, is very much in scope.

• We aim to acknowledge a report within 5 business days.
• We will keep you informed of our assessment and remediation timeline, and coordinate disclosure timing with you.
• With your consent, we are happy to credit you in the advisory and release notes.