If you discover a security vulnerability, please report it privately via GitHub Security Advisories.

Please do not open a public issue for security vulnerabilities.

runsheet is an in-memory pipeline orchestration library. It does not handle network I/O, authentication, or data storage directly. Security concerns most relevant to this project include:

• Input validation bypass in schema handling
• Unexpected code execution via step composition
• Information leakage through error messages or context accumulation