If you discover a security vulnerability within GoRuntime Kernel, please send an email to denysskobalodev@gmail.com. All security vulnerabilities will be promptly addressed.

Please do not open public issues for security bugs.

• Never commit secrets, API keys, or credentials
• Follow the principle of least privilege in CI/CD configurations
• Keep dependencies up to date and review security advisories for Go and Node.js packages
• Ensure SharedArrayBuffer and cross-origin isolation headers are correctly configured in production environments