FLOW defines portable package and invocation meaning. Hosts own execution authority and containment. Report suspected SDK or authoring vulnerabilities through the repository's private vulnerability reporting. Use Jig's security policy for Jig host vulnerabilities.