Please don't open a public issue or PR for a security problem. Report it privately instead:

• Preferred: open a private advisory on hai-agents-python, where the holo CLI lives. Installer issues: advisory on this repo.
• Or email: compliance@hcompany.ai.

Include what you did, what happened, the platform, and a proof-of-concept if you have one. We acknowledge reports within 3 business days.

Fixes land on the latest release only. The security model is documented in Security and privacy.