Packages

hyperlang

0.1.0
0.1.0

Run Erlang-shaped guest programs inside an Elixir host on the same BEAM, with no ambient authority: verified compilation, declared bindings, a frozen stdlib allowlist, and per-run resource limits.

HexDocs Report package

Current section

Files

Jump to
Documentation
Changelog
License
Security
1 Version
0 Dependencies
Dependants
Files
Activity
hyperlang SECURITY.md
Raw

SECURITY.md 

# Security Policy

## Reporting a vulnerability

Report suspected vulnerabilities privately to `bob@hyperbob.ai`. Do not open a
public issue.

Include the Hyperlang version, the OTP and Elixir versions, a minimal guest
source and manifest that reproduces the problem, and the observed and
expected behavior.

## Scope

The security contract is `doc/SECURITY_SPECIFICATION.md`. It defines what
Hyperlang guarantees, the threat model, and the known limitations. Hyperlang
alone is suitable for trusted or cooperative guest code. Semi-trusted or
hostile multi-tenant code needs host quotas plus OS or node isolation.