byteshard/grid

Security policycaution

The repository has no security policy, which leaves vulnerability-reporting expectations and response channels less transparent. This is a modest maintenance and transparency gap.

Workflow auditcaution

The sole workflow was fully analyzed with no injection or high-confidence audit findings, and it has no top-level write permissions. However, all four action references are unpinned, which is a caution for build reproducibility and action supply-chain hygiene.