# Security Policy / 安全策略

## Reporting / 报告方式

Do not publish tokens, Codex transcripts, session identifiers, or local pipe details in a public issue. Report security concerns privately to `im@crash.work` with reproduction steps and the affected version.

请勿在公开 Issue 中发布令牌、Codex 会话记录、会话 ID 或本地管道信息。请将复现步骤和受影响版本通过 `im@crash.work` 私下报告。

Only the latest released version receives security fixes.

仅当前最新发布版本提供安全修复。