Update SECURITY.md

Note that native code gen is currently exempt from any security guarantees as it's a pre-production R&D component right now. This will change in the future as we deploy it to production.
luau-lang · Mar 1, 2023 · 48172dd · 48172dd
1 parent 6601c41
commit 48172dd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/SECURITY.md b/SECURITY.md
@@ -1,6 +1,6 @@
 # Security Guarantees
 
-Luau provides a safe sandbox that scripts can not escape from, short of vulnerabilities in custom C functions exposed by the host. This includes the virtual machine and builtin libraries.
+Luau provides a safe sandbox that scripts can not escape from, short of vulnerabilities in custom C functions exposed by the host. This includes the virtual machine and builtin libraries. Notably this currently does *not* include the work-in-progress native code generation facilities.
 
 Any source code can not result in memory safety errors or crashes during its compilation or execution. Violations of memory safety are considered vulnerabilities.