Security starts with honesty.
Understand the project’s current status before trusting it with a network.
Project security status
OpenRSD is in early development and has no public software release. It has not been represented as audited, hardened, or ready to protect a production network.
Do not publish vulnerability details, passwords, private configurations, or network secrets in public discussions. A private security reporting channel has not yet been announced.
Issues in the upstream OpenBSD operating system should follow OpenBSD security guidance ↗.
Configuration safety is a design goal
Reviewable changes, validation, backups, and rollback are explicit roadmap priorities. Their presence in a design document does not mean they have been implemented.