Meta-Universe is a specification with reference tooling. "Security" here means two things:

1. Specification security — a flaw in the standard that would let a conforming implementation be attacked (for example a gap in the Security Model, the Trust Model, or the Consent and Disclosure rules).
2. Tooling security — a flaw in the reference tools under tools/.

Please report privately. Do not open a public issue or pull request for a suspected vulnerability.

• Email the maintainers at security@orkestron.ai (or the address listed on the repository's security advisory page).
• Include: the affected document or tool, the threat, and — for specification issues — which Security Model threat (T1–T10) it relates to or extends.

We aim to acknowledge reports promptly, agree a disclosure timeline, and credit reporters who wish to be credited.

Specification security fixes are processed as Corrective Change Requests with priority and a clear migration note where behavior changes. Confirmed threats are folded into the Security Model threat table and the Semantic Test Kit.