Skip to content

Security: NotAzie/aegis

Security

SECURITY.md

Security Policy: Aegis Platform

1. Supported Versions

Security patches and vulnerability remediation are actively maintained for the following release targets:

Release Tier Version Branch Security Maintenance Status
Core Protocol 1.0.x Active Maintenance
Core Protocol < 1.0.0 Deprecated / Unsupported

2. Security Architecture & Invariants

Aegis enforces zero-knowledge runtime boundaries through formal mathematical and operational safeguards:

2.1 Algorithmic Guarantees

  • Probabilistic Collision Bounds: The dual-tier Bloom filter (Uint32Array(8192)) is sized for a maximum false-positive probability of $P &lt; 0.0001$ across a working set of 50,000 active domain rules under three coprime MurmurHash3 permutations.
  • Shannon Entropy Detection: Domain tokens and serialization vectors exhibiting Shannon entropy $H(X) \ge 3.4$ (alphanumeric) or $H(X) \ge 3.8$ (base64) are categorized as algorithmic tracking beacons and dropped prior to network dispatch.
  • Hardware Cohort Determinism: Synthetic canvas, WebGL, and audio buffers are generated via cryptographically salted MurmurHash3 projections mapping origins to invariant golden hardware profiles, preventing cross-session linkage while defeating statistical anomaly classifiers.

2.2 Memory Enclave Invariants

  • Zero Disk Persistence: Origin storage, session tokens, and cache entries reside strictly within RAM partitions (EphemeralVault).
  • Cryptographic Memory Erasure: Encryption keys generated via 256-bit cryptographically secure pseudo-random entropy undergo explicit zero-fill overwrites (Buffer.fill(0)) upon session termination.
  • RFC 8484 Wire Protocol: All DNS resolution bypasses local plaintext resolver sockets via TLS-encapsulated wire queries to trusted recursive endpoints.

3. Vulnerability Reporting Protocol

If you identify a security vulnerability or architectural flaw within Aegis, please report it through responsible disclosure channels:

  1. Direct Communication: Submit detailed findings to mazinullah317@gmail.com with the subject line format: [SECURITY-DISCLOSURE] Aegis Platform - <Component>.
  2. Report Payload:
    • Technical summary and threat vector classification.
    • Proof-of-concept (PoC) or reproducible test harness.
    • Evaluated blast radius and potential impact on host environments.
  3. Response Service Level Agreement (SLA):
    • Initial triage acknowledgement: Within 24 hours.
    • Severity assessment and remediation timeline: Within 72 hours.
    • Public advisory publication: Coordinated following patch deployment.

Do not open public GitHub issues for undisclosed security vulnerabilities.

There aren't any published security advisories