Please do not open a public issue for security problems. Use GitHub's private vulnerability reporting for this repository. You should get an acknowledgement within three working days.

This project is a reference implementation. The threat model lists what it is designed to defend against and what is deliberately out of scope.

• Put the studio behind a gateway that authenticates users and sets their roles, and set STUDIO_SERVICE_TOKEN so nothing else can assert a role.
• Keep the release-manager and approver groups small; review the audit log, especially promotions with acknowledged risks.
• Use the prod overlay (PostgreSQL, two or more replicas) for anything shared.
• Review every new tool added to the catalog: the platform, not the specs, decides what tools do.