AGENTS.md
+2 −1
https://raw.githubusercontent.com/28naem-del/mnemosyne/HEAD/AGENTS.md
− - Do not change `scripts/public-identity.json` or the contact address without a maintainer decision.+ - Do not change `scripts/public-identity.json` or the contact address without a maintainer decision. `contact` is the public support address. An optional `securityContact` requires maintainer confirmation before it is advertised; current vulnerability reporting uses `contact` as described in [SECURITY.md](SECURITY.md).+ - Do not replace a pinned GitHub Action commit SHA with a floating tag. Dependabot updates those pins.