Security fixes are applied to the latest release line of ICA. If you are on an older version, update to the newest release first.

Please do not open public issues for security reports.

Report privately via:

• GitHub Security Advisories (preferred): Security tab on this repository
• Email: security@intelligentcode.ai

Include:

• affected version/commit
• reproduction steps
• impact assessment
• any proposed mitigation

• Initial acknowledgment target: within 3 business days
• Triage + severity assignment: as quickly as possible after reproduction
• Fix timeline: based on severity and exploitability

We follow coordinated disclosure. Public details are shared after a fix is available or after mitigation guidance is provided.