Please do not disclose a suspected vulnerability in a public issue. Contact the Astrid security maintainers privately with a reproduction, affected crate/command, version or commit, and the smallest safe mitigation. Remove private keys, credentials, and unpublished Station records from reports.

Station tooling treats repository files, archive entries, TUF metadata, event bodies, and mirror locators as untrusted input. Verification is bounded and fail-closed, but a valid signer can still authorize an incorrect record. Keep root keys offline, use threshold review for publication and namespace changes, and treat local capability approval as independent from Station/TUF trust.

The runtime boundary is intentionally outside this repository. A Station helper may hand Astrid only a verified staged local .capsule path under explicit operator policy; it must not pass a Station coordinate or remote URL as an installer source.