Please do not disclose suspected vulnerabilities, credentials, API keys, Bridge tokens, user data, or an unredacted proof of concept in a public Issue.

After this repository is hosted on GitHub, use GitHub's private vulnerability reporting entry when it is available. If private reporting is unavailable, open a minimal public Issue asking the maintainer to establish a private channel; do not include vulnerability details or sensitive evidence in that Issue.

Include the affected version, platform, reproduction steps, impact, and the smallest redacted evidence needed to understand the issue. Do not test against data, accounts, or devices that you do not own or have explicit permission to use.

No response-time or remediation-time commitment is made.