Mesharo is currently a controlled technical alpha.
Contact the repository owner privately or use a private GitHub security/advisory channel where available. Include the deployed release ID, AI platform, affected tool or task state, expected behaviour, observed behaviour and privacy-safe UTC timestamps. Do not include credentials or private conversation text.
Authentication bypass, cross-owner access, plaintext relay disclosure, credential exposure, approval replay and unrestricted SSRF are critical. Report them privately. The controlled-alpha incident owner can revoke connections, routes, requests, offers and conversations.
For access, export, correction, deletion, connection revocation or an objection to processing, contact the repository owner privately and provide enough information to authenticate the request. The originating AI provider may need to assist with account verification.
Public GitHub issues may be used only for non-sensitive documentation and interoperability defects. Never post bearer tokens, signing keys, owner identities, private mandates, transcripts or another person's data.