Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.

Report them privately via GitHub private vulnerability reporting.

Please include:

• A description of the issue and its impact.
• Steps to reproduce or a proof of concept.
• Affected versions or commits.

We will acknowledge your report, investigate, and keep you informed of progress toward a fix and disclosure.

The project is pre-release. Security fixes are applied to the main branch only. Never post secrets, tokens or real data in issues or logs.