causasv 0.8.9

Causal feature attribution via Asymmetric Shapley Values (ASV) over DAGs — Rust + Python
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45

# Security Policy

## Supported Versions

Security fixes are provided for the latest release and the `main` branch.

| Version | Supported |
|---------|-----------|
| latest  | ✅ |
| main    | ✅ |
| older   | ❌ |

## Reporting a Vulnerability

**Do not open a public GitHub issue for security vulnerabilities.**

Please use [GitHub's private vulnerability reporting](https://github.com/kent-tokyo/causasv/security/advisories/new).

Include:
- A clear description of the issue
- Steps to reproduce
- Affected versions or commits
- Potential impact and suggested mitigation

**Response timeline:** I will try to acknowledge valid reports within 72 hours.
After triage, I will provide a fix, a workaround, or a request for more information.

## Disclosure Policy

Please allow reasonable time to investigate and fix before public disclosure.
A GitHub Security Advisory and patched release will be published when a fix is available.

## Scope

**In scope:**
- Unsafe Rust behavior that can lead to memory unsafety
- Undefined behavior
- Dependency vulnerabilities
- Python binding issues causing crashes or unsafe behavior
- CI/CD or release process vulnerabilities

**Out of scope:**
- General feature requests or non-security bugs
- Performance issues without security impact
- Vulnerabilities requiring malicious local code execution in an already-compromised environment