Report a vulnerability privately to contact@passioncode.ai, never in a public issue.

This file is also the organization's default security policy: GitHub shows it in every passioncode-ai repository that has no SECURITY.md of its own. A repository with its own file names the private channel for that repository.