Supported Versions
The Deep State of Mind (DSOM) For My AI framework follows a governance-tagged versioning scheme. Only the current active release branch receives security and governance updates.Note: DSOM is a governance and metacognitive framework, not a compiled application. “Security” in this context covers:
- Sensitive data (credentials, IPs, tokens) accidentally committed to Git history.
- Rogue or untrusted scripts introduced into
.agents/skills/ortools/.- Insecure Ansible playbook patterns exposing remote node credentials.
- Violations of the Zero-Trust and Privacy Guardian protocols.
Reporting a Vulnerability
If you discover a security issue, including sensitive data in the repository, a vulnerable workflow, or a broken privacy control, please report it responsibly by following this procedure:1. Private Disclosure (Preferred)
Do not open a public GitHub Issue for security vulnerabilities. Instead:- Use GitHub Private Security Advisories to report the issue privately.
- Alternatively, contact the maintainer directly via the email listed on the GitHub profile.
2. What to Include
Provide as much detail as possible:- A clear description of the vulnerability and its potential impact.
- Steps to reproduce or a proof-of-concept.
- Relevant file paths, commit hashes, or line numbers.
- Your suggested remediation (if any).
3. Response Timeline
4. DSOM-Specific Remediation Tools
The following built-in DSOM tools are available for security remediation:Scope
This security policy applies to:- All files in this repository under the DSOM framework.
- All scripts in
tools/and skills in.agents/skills/. - All brain files in
.agents/brain/(which may contain session context and node references). - All GitHub Actions workflows in
.github/workflows/.
Deep State of Mind (DSOM) For My AI Protocol | Harisfazillah Jamel (LinuxMalaysia) | 2026-07-27 Standard: UK English | DBP-standard Bahasa Melayu Malaysia (Piawai) | GNU General Public License v3.0