game-learning-runtime 0.1.0__tar.gz

game_learning_runtime-0.1.0/.github/CODEOWNERS

@@ -0,0 +1,2 @@
+* @loonghao
+

game_learning_runtime-0.1.0/.github/ISSUE_TEMPLATE/bug.yml

@@ -0,0 +1,33 @@
+name: Bug report
+description: Report a reproducible GLR defect
+title: "bug: "
+labels: [bug]
+body:
+  - type: markdown
+    attributes:
+      value: Do not include secrets, proprietary game data, or unauthorized instrumentation details.
+  - type: input
+    id: version
+    attributes:
+      label: GLR version or commit
+    validations:
+      required: true
+  - type: textarea
+    id: reproduction
+    attributes:
+      label: Minimal authorized reproduction
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+    validations:
+      required: true
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual behavior
+    validations:
+      required: true
+

game_learning_runtime-0.1.0/.github/dependabot.yml

@@ -0,0 +1,13 @@
+version: 2
+updates:
+  - package-ecosystem: pip
+    directory: "/"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+

game_learning_runtime-0.1.0/.github/pull_request_template.md

@@ -0,0 +1,14 @@
+## Summary
+
+## Contract impact
+
+- [ ] No public contract or schema change
+- [ ] Public contract/schema change is documented and covered by an ADR
+
+## Verification
+
+- [ ] Core quality and tests pass
+- [ ] Protocol schema compiles
+- [ ] TorchRL check passes when the integration changes
+- [ ] No secrets, proprietary game data, or unauthorized instrumentation added
+

game_learning_runtime-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,62 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  core:
+    uses: ./.github/workflows/reusable-python-ci.yml
+    with:
+      python-versions: '["3.10", "3.11", "3.12", "3.13"]'
+      sync-args: "--frozen --all-groups"
+      lint-command: "uv run ruff check . && uv run ruff format --check . && uv run mypy"
+      test-command: 'uv run pytest -m "not torchrl" --cov=game_learning_runtime --cov-report=term-missing'
+
+  torchrl:
+    name: TorchRL 0.13 contract
+    runs-on: ubuntu-latest
+    timeout-minutes: 25
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        with:
+          version: "0.11.19"
+          python-version: "3.12"
+          enable-cache: true
+          cache-dependency-glob: uv.lock
+      - run: uv sync --frozen --all-groups --extra torchrl
+      - run: uv run --extra torchrl mypy src/game_learning_runtime/integrations/torchrl.py
+      - run: uv run --extra torchrl pytest tests_optional -m torchrl
+
+  package:
+    name: Build distribution
+    needs: [core, torchrl]
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        with:
+          version: "0.11.19"
+          python-version: "3.12"
+          enable-cache: true
+          cache-dependency-glob: uv.lock
+      - run: uv sync --frozen --all-groups
+      - run: uv build
+      - run: uv run twine check dist/*
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: python-distributions
+          path: dist/
+          if-no-files-found: error
+          retention-days: 7

game_learning_runtime-0.1.0/.github/workflows/release.yml

@@ -0,0 +1,52 @@
+name: Release
+
+on:
+  push:
+    tags: ["v*.*.*"]
+
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
+permissions:
+  contents: write
+  id-token: write
+  attestations: write
+
+jobs:
+  verify:
+    uses: ./.github/workflows/reusable-python-ci.yml
+    with:
+      python-versions: '["3.12"]'
+      sync-args: "--frozen --all-groups"
+      lint-command: "uv run ruff check . && uv run ruff format --check . && uv run mypy"
+      test-command: 'uv run pytest -m "not torchrl" --cov=game_learning_runtime --cov-report=term-missing'
+
+  release:
+    name: Build and publish GitHub Release
+    needs: verify
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          fetch-depth: 0
+      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        with:
+          version: "0.11.19"
+          python-version: "3.12"
+          enable-cache: true
+          cache-dependency-glob: uv.lock
+      - run: uv sync --frozen --all-groups
+      - name: Verify semantic version tag
+        run: uv run python scripts/verify_release.py "${{ github.ref_name }}"
+      - run: uv build
+      - run: uv run twine check dist/*
+      - name: Attest distributions
+        uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2
+        with:
+          subject-path: "dist/*"
+      - name: Create immutable release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: gh release create "${{ github.ref_name }}" dist/* --verify-tag --generate-notes --title "${{ github.ref_name }}"

game_learning_runtime-0.1.0/.github/workflows/reusable-python-ci.yml

@@ -0,0 +1,56 @@
+name: Reusable uv Python CI
+
+on:
+  workflow_call:
+    inputs:
+      python-versions:
+        description: JSON array of Python versions
+        required: false
+        type: string
+        default: '["3.12"]'
+      sync-args:
+        description: Arguments passed to uv sync
+        required: false
+        type: string
+        default: "--frozen --all-groups"
+      lint-command:
+        description: Quality command executed before tests
+        required: false
+        type: string
+        default: "uv run ruff check . && uv run ruff format --check . && uv run mypy"
+      test-command:
+        description: Test command
+        required: false
+        type: string
+        default: "uv run pytest"
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: Python ${{ matrix.python-version }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ${{ fromJSON(inputs.python-versions) }}
+    steps:
+      - name: Check out caller repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - name: Install uv and Python
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        with:
+          version: "0.11.19"
+          python-version: ${{ matrix.python-version }}
+          enable-cache: true
+          cache-dependency-glob: uv.lock
+      - name: Verify lock file
+        run: uv lock --check
+      - name: Install dependencies
+        run: uv sync ${{ inputs.sync-args }}
+      - name: Run quality checks
+        run: ${{ inputs.lint-command }}
+      - name: Run tests
+        run: ${{ inputs.test-command }}

game_learning_runtime-0.1.0/.gitignore

@@ -0,0 +1,15 @@
+__pycache__/
+*.py[cod]
+*.egg-info/
+.coverage
+.mypy_cache/
+.pytest_cache/
+.ruff_cache/
+.venv/
+build/
+dist/
+htmlcov/
+.idea/
+.vscode/
+*.log
+

game_learning_runtime-0.1.0/.python-version

@@ -0,0 +1 @@
+3.12

game_learning_runtime-0.1.0/CHANGELOG.md

@@ -0,0 +1,22 @@
+# Changelog
+
+All notable changes to this project are documented here. The format follows
+[Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the project uses
+[Semantic Versioning](https://semver.org/).
+
+## [Unreleased]
+
+## [0.1.0] - 2026-08-31
+
+### Added
+
+- Framework-neutral environment, tensor-tree, time-step, transition, and
+  unroll contracts.
+- Fail-closed runtime contract validation.
+- Versioned Protobuf runtime service and JSONL transition records.
+- Optional TorchRL environment adapter.
+- Counter environment example, documentation, reusable CI, and release CD.
+
+[Unreleased]: https://github.com/loonghao/GameLearningRuntime/compare/v0.1.0...HEAD
+[0.1.0]: https://github.com/loonghao/GameLearningRuntime/releases/tag/v0.1.0
+

game_learning_runtime-0.1.0/CODE_OF_CONDUCT.md

@@ -0,0 +1,10 @@
+# Code of Conduct
+
+We are committed to a respectful, harassment-free project for everyone.
+Contributors must be constructive, respect privacy and intellectual property,
+and keep security-sensitive reports private until coordinated disclosure.
+
+Maintainers may edit, reject, or remove contributions and participation that
+violate these expectations. Report conduct issues privately through the
+maintainer contact listed in the repository profile.
+

game_learning_runtime-0.1.0/CONTRIBUTING.md

@@ -0,0 +1,40 @@
+# Contributing
+
+Thanks for helping make game-learning infrastructure reusable.
+
+## Development
+
+Prerequisites: Git and [uv](https://docs.astral.sh/uv/).
+
+```powershell
+git clone https://github.com/loonghao/GameLearningRuntime.git
+cd GameLearningRuntime
+uv sync --frozen --all-groups
+uv run ruff check .
+uv run ruff format --check .
+uv run mypy
+uv run pytest -m "not torchrl" --cov=game_learning_runtime --cov-report=term-missing
+uv build
+uv run twine check dist/*
+```
+
+Optional TorchRL contract:
+
+```powershell
+uv sync --frozen --all-groups --extra torchrl
+uv run --extra torchrl pytest tests_optional -m torchrl
+```
+
+## Change contract
+
+- Keep game adapters independent from learning algorithms.
+- Add or update an ADR when changing a public boundary or wire format.
+- Treat protocol and dataset schemas as versioned compatibility contracts.
+- Add adversarial tests for lifecycle, shapes, dtypes, bounds, masks, and stale
+  episode/step identity.
+- Use Conventional Commits in English.
+- Do not add game instrumentation unless it is legal, authorized, and isolated
+  behind an adapter.
+
+Open a pull request only after local checks pass. A maintainer review and green
+required checks are necessary before merge.

game_learning_runtime-0.1.0/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2026 loonghao
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+

game_learning_runtime-0.1.0/PKG-INFO

@@ -0,0 +1,165 @@
+Metadata-Version: 2.5
+Name: game-learning-runtime
+Version: 0.1.0
+Summary: A universal runtime for connecting games to learning systems and AI agents.
+Project-URL: Documentation, https://github.com/loonghao/GameLearningRuntime#readme
+Project-URL: Issues, https://github.com/loonghao/GameLearningRuntime/issues
+Project-URL: Repository, https://github.com/loonghao/GameLearningRuntime
+Author-email: loonghao <hal.long@outlook.com>
+License-Expression: MIT
+License-File: LICENSE
+Keywords: environment,game-ai,imitation-learning,reinforcement-learning,torchrl
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Science/Research
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Requires-Python: >=3.10
+Requires-Dist: numpy<2.3,>=1.26
+Provides-Extra: torchrl
+Requires-Dist: torch>=2.8; extra == 'torchrl'
+Requires-Dist: torchrl<0.14,>=0.13; extra == 'torchrl'
+Description-Content-Type: text/markdown
+
+# Game Learning Runtime
+
+[![CI](https://github.com/loonghao/GameLearningRuntime/actions/workflows/ci.yml/badge.svg)](https://github.com/loonghao/GameLearningRuntime/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
+[![Python](https://img.shields.io/badge/Python-3.10--3.13-3776AB.svg)](pyproject.toml)
+
+Game Learning Runtime (GLR) is a framework-neutral contract between game
+runtimes and learning systems. A game adapter describes observations, actions,
+action masks, rewards, events, and episode boundaries once; TorchRL, custom PPO
+or IMPALA learners, behavior cloning, offline datasets, evaluators, and QA tools
+can then consume the same interface.
+
+> A universal runtime for connecting games to learning systems and AI agents.
+
+GLR is intended for games and test environments you own or are authorized to
+instrument. It does not include anti-cheat bypasses, stealth injection, or
+game-specific reverse-engineering code.
+
+## Why this boundary
+
+```text
+Game / simulator
+      │
+      ▼
+Runtime adapter (C#, C++, Rust, Python, official API, ...)
+      │
+      ▼
+GLR protocol + environment contract
+      │
+      ├── TorchRL
+      ├── custom PPO / IMPALA
+      ├── BC / DAgger / offline learning
+      ├── recorder / replay
+      └── evaluation / automated QA
+```
+
+Game adapters never import PPO, IMPALA, BC, or TorchRL. Learning code never
+needs to know whether the game is Unity, Unreal, Source, native, or a test
+simulator. The standardized boundary is the data and lifecycle contract, not a
+single implementation language or transport.
+
+## Implemented in v0.1
+
+- Recursive tensor-tree specs for continuous, discrete, multi-discrete, binary,
+  hybrid, parameterized, and hierarchical data.
+- A `GameEnvironment` port with reset, step, close, action masks, semantic
+  events, terminated/truncated signals, episode IDs, and monotonic step IDs.
+- A fail-closed `ContractEnvironment` wrapper that validates every boundary.
+- Fixed-length actor `Unroll` collection suitable for custom PPO and IMPALA.
+- Versioned `glr.transition.v1` JSONL records for BC, replay, and offline data.
+- A packaged `glr.v1` Protobuf service with unary and bidirectional streaming
+  interaction contracts.
+- An optional TorchRL `EnvBase` adapter tested against TorchRL 0.13.
+
+Game-specific runtime adapters, generated C#/C++/Rust protocol SDKs,
+distributed actor transport, and learner implementations are roadmap items—not
+features claimed by this initial release.
+
+## Install
+
+Until PyPI trusted publishing is enabled, pin a GitHub release tag:
+
+```powershell
+uv add "game-learning-runtime @ git+https://github.com/loonghao/GameLearningRuntime@v0.1.0"
+```
+
+Add the TorchRL integration only where training requires it:
+
+```powershell
+uv add "game-learning-runtime[torchrl] @ git+https://github.com/loonghao/GameLearningRuntime@v0.1.0"
+```
+
+## Minimal environment
+
+```python
+import numpy as np
+
+from game_learning_runtime import ContractEnvironment, SyncCollector
+from game_learning_runtime.examples import CounterEnvironment, always_increment
+
+environment = ContractEnvironment(CounterEnvironment(target=3))
+collector = SyncCollector(environment, actor_id="local-actor")
+unroll = collector.collect(always_increment, steps=16, policy_version=0)
+
+print(len(unroll.transitions), unroll.total_reward)
+```
+
+Run the complete example from a clone:
+
+```powershell
+uv sync --frozen
+uv run python -c "from game_learning_runtime import *; from game_learning_runtime.examples import *; print(SyncCollector(ContractEnvironment(make_environment())).collect(always_increment, steps=4).total_reward)"
+```
+
+For TorchRL:
+
+```python
+from game_learning_runtime.examples import CounterEnvironment
+from game_learning_runtime.integrations.torchrl import TorchRLEnvironment
+
+env = TorchRLEnvironment(CounterEnvironment())
+rollout = env.rollout(max_steps=32)
+```
+
+## Reuse the CI workflow
+
+Any uv-managed Python repository can call the public reusable workflow:
+
+```yaml
+jobs:
+  quality:
+    uses: loonghao/GameLearningRuntime/.github/workflows/reusable-python-ci.yml@v0.1.0
+    with:
+      python-versions: '["3.10", "3.12"]'
+      sync-args: "--frozen --all-groups"
+      lint-command: "uv run ruff check . && uv run mypy"
+      test-command: "uv run pytest"
+```
+
+Pin a release tag or commit SHA in production repositories. The workflow never
+receives deployment secrets and only checks out/tests the calling repository.
+
+## Documentation
+
+- [Getting started](docs/guides/getting-started.md)
+- [Architecture](docs/architecture/overview.md)
+- [Protocol and data flow](docs/architecture/data-flow.md)
+- [Local development](docs/runbooks/local-development.md)
+- [Release runbook](docs/runbooks/release.md)
+- [Roadmap](docs/planning/roadmap.md)
+- [Architecture decisions](docs/decisions/README.md)
+
+## Contributing and security
+
+See [CONTRIBUTING.md](CONTRIBUTING.md) for the development contract and
+[SECURITY.md](SECURITY.md) for private vulnerability reporting. GLR is licensed
+under the [MIT License](LICENSE).

game_learning_runtime-0.1.0/README.md

@@ -0,0 +1,137 @@
+# Game Learning Runtime
+
+[![CI](https://github.com/loonghao/GameLearningRuntime/actions/workflows/ci.yml/badge.svg)](https://github.com/loonghao/GameLearningRuntime/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
+[![Python](https://img.shields.io/badge/Python-3.10--3.13-3776AB.svg)](pyproject.toml)
+
+Game Learning Runtime (GLR) is a framework-neutral contract between game
+runtimes and learning systems. A game adapter describes observations, actions,
+action masks, rewards, events, and episode boundaries once; TorchRL, custom PPO
+or IMPALA learners, behavior cloning, offline datasets, evaluators, and QA tools
+can then consume the same interface.
+
+> A universal runtime for connecting games to learning systems and AI agents.
+
+GLR is intended for games and test environments you own or are authorized to
+instrument. It does not include anti-cheat bypasses, stealth injection, or
+game-specific reverse-engineering code.
+
+## Why this boundary
+
+```text
+Game / simulator
+      │
+      ▼
+Runtime adapter (C#, C++, Rust, Python, official API, ...)
+      │
+      ▼
+GLR protocol + environment contract
+      │
+      ├── TorchRL
+      ├── custom PPO / IMPALA
+      ├── BC / DAgger / offline learning
+      ├── recorder / replay
+      └── evaluation / automated QA
+```
+
+Game adapters never import PPO, IMPALA, BC, or TorchRL. Learning code never
+needs to know whether the game is Unity, Unreal, Source, native, or a test
+simulator. The standardized boundary is the data and lifecycle contract, not a
+single implementation language or transport.
+
+## Implemented in v0.1
+
+- Recursive tensor-tree specs for continuous, discrete, multi-discrete, binary,
+  hybrid, parameterized, and hierarchical data.
+- A `GameEnvironment` port with reset, step, close, action masks, semantic
+  events, terminated/truncated signals, episode IDs, and monotonic step IDs.
+- A fail-closed `ContractEnvironment` wrapper that validates every boundary.
+- Fixed-length actor `Unroll` collection suitable for custom PPO and IMPALA.
+- Versioned `glr.transition.v1` JSONL records for BC, replay, and offline data.
+- A packaged `glr.v1` Protobuf service with unary and bidirectional streaming
+  interaction contracts.
+- An optional TorchRL `EnvBase` adapter tested against TorchRL 0.13.
+
+Game-specific runtime adapters, generated C#/C++/Rust protocol SDKs,
+distributed actor transport, and learner implementations are roadmap items—not
+features claimed by this initial release.
+
+## Install
+
+Until PyPI trusted publishing is enabled, pin a GitHub release tag:
+
+```powershell
+uv add "game-learning-runtime @ git+https://github.com/loonghao/GameLearningRuntime@v0.1.0"
+```
+
+Add the TorchRL integration only where training requires it:
+
+```powershell
+uv add "game-learning-runtime[torchrl] @ git+https://github.com/loonghao/GameLearningRuntime@v0.1.0"
+```
+
+## Minimal environment
+
+```python
+import numpy as np
+
+from game_learning_runtime import ContractEnvironment, SyncCollector
+from game_learning_runtime.examples import CounterEnvironment, always_increment
+
+environment = ContractEnvironment(CounterEnvironment(target=3))
+collector = SyncCollector(environment, actor_id="local-actor")
+unroll = collector.collect(always_increment, steps=16, policy_version=0)
+
+print(len(unroll.transitions), unroll.total_reward)
+```
+
+Run the complete example from a clone:
+
+```powershell
+uv sync --frozen
+uv run python -c "from game_learning_runtime import *; from game_learning_runtime.examples import *; print(SyncCollector(ContractEnvironment(make_environment())).collect(always_increment, steps=4).total_reward)"
+```
+
+For TorchRL:
+
+```python
+from game_learning_runtime.examples import CounterEnvironment
+from game_learning_runtime.integrations.torchrl import TorchRLEnvironment
+
+env = TorchRLEnvironment(CounterEnvironment())
+rollout = env.rollout(max_steps=32)
+```
+
+## Reuse the CI workflow
+
+Any uv-managed Python repository can call the public reusable workflow:
+
+```yaml
+jobs:
+  quality:
+    uses: loonghao/GameLearningRuntime/.github/workflows/reusable-python-ci.yml@v0.1.0
+    with:
+      python-versions: '["3.10", "3.12"]'
+      sync-args: "--frozen --all-groups"
+      lint-command: "uv run ruff check . && uv run mypy"
+      test-command: "uv run pytest"
+```
+
+Pin a release tag or commit SHA in production repositories. The workflow never
+receives deployment secrets and only checks out/tests the calling repository.
+
+## Documentation
+
+- [Getting started](docs/guides/getting-started.md)
+- [Architecture](docs/architecture/overview.md)
+- [Protocol and data flow](docs/architecture/data-flow.md)
+- [Local development](docs/runbooks/local-development.md)
+- [Release runbook](docs/runbooks/release.md)
+- [Roadmap](docs/planning/roadmap.md)
+- [Architecture decisions](docs/decisions/README.md)
+
+## Contributing and security
+
+See [CONTRIBUTING.md](CONTRIBUTING.md) for the development contract and
+[SECURITY.md](SECURITY.md) for private vulnerability reporting. GLR is licensed
+under the [MIT License](LICENSE).

game_learning_runtime-0.1.0/SECURITY.md

@@ -0,0 +1,20 @@
+# Security Policy
+
+## Supported versions
+
+The latest minor release receives security fixes. This project is currently
+pre-1.0, so public contracts may evolve with documented migration notes.
+
+## Reporting a vulnerability
+
+Use GitHub's private vulnerability reporting for this repository. Do not open a
+public issue containing an exploit, token, private game artifact, process dump,
+or proprietary runtime detail.
+
+Include the affected version, impact, a minimal authorized reproduction, and
+suggested remediation when available. Maintainers will acknowledge a complete
+report within seven days.
+
+GLR does not accept features intended to bypass anti-cheat, hide unauthorized
+instrumentation, or access systems without permission.
+