Please do not report security vulnerabilities through public GitHub issues.

Instead, report via email to: security@thecontinuitylab.org

You should receive a response within 48 hours. We will release a patch as soon as possible and publicly acknowledge your responsible disclosure (unless you prefer to remain anonymous).

• CPS-0001 receipt verification logic, signature validation, replay protection
• Reference verifier (V₁–V₇)
• HTTP verifier plugin
• Test vectors and conformance suite integrity