The latest minor of the latest major is supported.
Report suspected framework-level issues privately via GitHub Security Advisories on this repo: https://github.com/Space-Dinosaurs/DinoStack/security/advisories/new
Framework-level bugs that could enable unsafe behavior: bypasses of the deny-list, unintended secret exposure, worktree-state corruption, dependency-chain issues.
General model behavior unrelated to a reproducible framework flaw.
Acknowledge within 5 business days; initial assessment within 10 business days.