Skip to content

Security: revjmoney/HELLBRAIN-AI

Security

SECURITY.md

Security Policy

HELLBRAIN is an experimental, offline reinforcement-learning project. It runs locally, opens no network services, and binds no ports. Still, a few things are worth knowing.

Reporting a vulnerability

Email therealrevjmoney@gmail.com with details and steps to reproduce. Please don't open a public issue for anything sensitive until it's been addressed.

Things to be aware of

  • Don't load model checkpoints from untrusted sources. Training writes Stable-Baselines3 .zip checkpoints, and PPO.load() unpickles them. Loading a checkpoint someone else gave you is equivalent to running their code. Only load checkpoints you produced yourself.
  • ROMs are yours to supply. No game ROMs are included or distributed here. You are responsible for obtaining any commercial ROM legally. DOOM uses the free/libre Freedoom assets bundled with VizDoom.
  • Init states / save files you create are read back with the emulator's load-state; only load ones you made.

No warranty

This software is provided "as is" under the MIT License, with no warranty. It is for research and entertainment — not for any safety-critical or financial use.

There aren't any published security advisories