MoonPermit is pre-1.0 research software. Please report suspected security issues privately to the repository owner through GitHub's security-advisory interface rather than publishing exploit details in a public issue.

Read docs/threat-model.md before relying on the project. In particular, MoonPermit is not an operating-system sandbox or a production cryptographic credential system, and complete mediation by the host is required.