james.maesandClaude Sonnet 5.5
089f57f759
Commit1d3847ddeleted the entire tree (2584 files) and added nothing, so main was empty. This restores main todc43a6a(the PR 22 merge) exactly. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
1.0 KiB
Security policy
Do not open public issues containing vulnerabilities, credentials, device tokens, session cookies, or real scan data.
Report vulnerabilities privately through GitHub security reporting when available, or email security@qrun.io. Include the affected commit/APK version, Android and QQQ versions, a synthetic reproduction, and the impact.
The scanner host is experimental. Report issues against the current development version; there is not yet a stable scanner APK support schedule. The broader QQQ security policy applies to the framework.
Release installations must use HTTPS, authenticated users, and approved device credentials. The debug APK permits HTTP for local development only. Device enrollment secrets and sessions must not be included in backup, transfer, logs, or process values. Scanner-provided metadata is client input rather than proof of hardware identity.