Skip to content

Security: GraphTechnologyDevelopers/rag-architect

Security

SECURITY.md

Security Policy

rag-architect is a documentation, profile, and skill repository. It should not contain secrets, credentials, private customer data, or live production traces.

Reporting a vulnerability

If you find a security issue in this repository's templates or guidance, please open a GitHub issue or contact Grey Newell through https://greynewell.com.

Data handling expectations

When contributing examples or templates:

  • Do not include API keys or tokens.
  • Do not include private customer data.
  • Do not include proprietary internal documents.
  • Redact production traces before sharing.
  • Treat agent tool examples with side effects carefully.

AI system safety expectations

Architecture guidance should encourage:

  • typed tool schemas
  • authorization checks
  • idempotency for writes
  • structured failure modes
  • traceability
  • no-answer behavior when context is insufficient
  • eval coverage for hallucination resistance

There aren't any published security advisories