Tidepool is a single-player game that runs locally on the EigenScript interpreter. It opens no network sockets and stores only local files (models/, saves/). The realistic attack surface is small, but reports are welcome.

Please report security issues privately rather than in a public issue — e.g. via GitHub private vulnerability reporting or by contacting the maintainer at the address on the InauguralSystems profile. Include steps to reproduce and the affected EigenScript version.

• Issues in the EigenScript interpreter or its extensions (graphics, etc.) belong in the EigenScript repository, which has its own security process.
• Tidepool's own scope is the .eigs game/trainer code: e.g. unsafe handling of save files (saves/) or model files (models/) loaded from disk.

The latest release on main is supported. Tidepool tracks a pinned EigenScript version (see .devcontainer/Dockerfile's EIGS_REF); run against that or newer (the neural policy's flat buffers need v0.19.0+).