Skip to content

Security: ojackson08/agentledger

Security

SECURITY.md

Security Policy

About This Project

agentledger is an audit and metering tool developed by Merkaba AI Risk Management. It stores the immutable history of agent actions and costs.

Reporting a Vulnerability

If you discover a security vulnerability — including API authentication bypasses, ways to forge ledger entries, or DynamoDB injection flaws — please report it to:

Email: security@merkabacreatives.org Subject line: [SECURITY] agentledger — <brief description>

We will acknowledge receipt within 48 hours.

Security Design Notes

  • The ledger is append-only; agents have no permissions to modify or delete historical records.
  • API Gateway endpoints require strict authentication.

There aren't any published security advisories