# Security

The canonical vulnerability reporting policy is
[`.github/SECURITY.md`](.github/SECURITY.md).

The project safety and integrity model is
[`docs/SECURITY_AND_INTEGRITY.md`](docs/SECURITY_AND_INTEGRITY.md). It explains
why this full-node repository contains high-signal components such as Tor,
wallet/key code, P2P networking, MCP tools, fuzzers, and crash harnesses, and it
lists the concrete controls used to keep them scoped to authorized operation.
