Please do not open a public issue containing an exploitable vulnerability, credential, private conversation, production endpoint detail, or personal data.

Use GitHub's private vulnerability reporting for this repository. If that feature is unavailable, contact the repository owner through the private contact method listed on their GitHub profile and include only the minimum information needed to establish contact. A secure channel can then be agreed before sharing reproduction material.

This is a personal production/research project. Security reports are reviewed on a best-effort basis; no response-time or bounty commitment is offered.

The system's architectural security and data-minimization boundaries are documented in docs/SECURITY.md.