SimpleOS is an educational operating system and is not intended to protect production data or run untrusted workloads.

Report vulnerabilities in the repository, build pipeline, or hosted browser demo through GitHub private vulnerability reporting. Do not open a public issue for credentials, active exploits, or private data.

Only the current main revision is supported. Reports about missing production OS hardening are out of scope unless the behavior contradicts a documented safety or isolation boundary.