HakuKernel is experimental software and is not intended for production or security-critical use. The kernel, bootloader, filesystem, and syscall interfaces are under active development and may contain vulnerabilities.

Please do not disclose an unpatched vulnerability in a public issue, pull request, discussion, or commit.

Use GitHub's private vulnerability reporting feature for this repository if the Report a vulnerability option is available in the repository's Security tab. If it is unavailable, contact the repository maintainer privately through GitHub and ask for a secure reporting channel. Do not include exploit details in a public message while arranging contact.

Include, when safe to do so:

• The affected commit, file, or component.
• The conditions required to reproduce the issue and its impact.
• A minimal proof of concept or logs that do not expose other people's data.
• Any suggested mitigation.

Please allow maintainers a reasonable opportunity to investigate and prepare a fix before public disclosure. There is no guaranteed response or patch timeline; this is a volunteer, experimental project.

Only the latest version on the default branch is considered for security fixes. No release or long-term-support guarantees are currently provided.