Skip to content

Security: abyo-software/nki-cookbook

Security

SECURITY.md

Security Policy

nki-cookbook is a collection of NKI (Neuron Kernel Interface) reference implementations. While security-critical bugs are uncommon in pure compute kernels, please report concerns responsibly.

Reporting a Vulnerability

Email privately: abyo.software@gmail.com

Include reproduction steps, affected version, and your contact info.

We aim to acknowledge reports within 7 days on a best-effort basis. Do not file public GitHub issues for security vulnerabilities.

Scope

In scope:

  • Out-of-bounds memory access in NKI kernels (rare but possible via wrong indexing)
  • Numeric correctness bugs that could lead to incorrect ML model output in downstream uses (we will treat these as "safety" issues, not just bugs)
  • License or attribution issues with bundled samples

Out of scope:

  • Issues in the upstream AWS Neuron SDK / NKI compiler — please report to AWS
  • Performance regressions (file as regular issues)
  • Known limitations documented in each recipe's README

There aren't any published security advisories