Bit-Physics is pre-release. There is no supported-versions table yet.

Report security issues privately via GitHub's private vulnerability reporting feature on the StevenFAU/Bit-Physics repository.

Please do not file public issues for suspected vulnerabilities.

Bit-Physics is a simulation portfolio; it does not handle user secrets, network traffic, or production data. Security-relevant areas are vendored upstream dependencies and supply-chain pins documented in docs/dependencies.md and the per-vendoring manifest files under references/.