Add gateway-first pattern: when AGILITON_API_KEY is set, route all external API calls through the gateway with X-API-Key auth. Falls back to direct API access when gateway is unavailable. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
12 lines
413 B
Markdown
12 lines
413 B
Markdown
# Security
|
|
|
|
Please file a private vulnerability report via GitHub, email [@ljharb](https://github.com/ljharb), or see https://tidelift.com/security if you have a potential security vulnerability to report.
|
|
|
|
## Incident Response Plan
|
|
|
|
Please see our [Incident Response Plan](https://github.com/ljharb/.github/blob/main/INCIDENT_RESPONSE_PLAN.md).
|
|
|
|
## Threat Model
|
|
|
|
Please see [THREAT_MODEL.md](./THREAT_MODEL.md).
|