Continuous Agent executes generated code within sandboxed environments (Wasmtime JIT fuel metering and gVisor container runtimes).

If you discover a potential sandbox escape, unauthorized resource access, or vulnerability:

1. Please do not disclose the issue publicly.
2. Open a private security advisory via GitHub's Security tab or reach out to the maintainers directly.
3. Provide a minimal reproducible example demonstrating the vulnerability.

We appreciate your responsible disclosure and will acknowledge your report promptly.