Do not include credentials, tokens, private host addresses, private source material, customer data or internal traces in issues, commits, screenshots, or generated documentation.

For an actual vulnerability, contact project maintainers privately through a mutually agreed secure channel; public issues are not appropriate for exploit details. This file does not claim an unattended security reporting inbox.

LLM usage is optional. Any outbound provider, telemetry or proxy must be separately classified and explicitly approved before supplying private context.