HEEL-G RUT is research software for ground traversability assessment. It is not a networked service by default, but evidence packages, signing keys, and future ROS / API surfaces deserve careful handling.

Please report security issues privately:

• Email: kylebean@fratres-x.com
• Subject line: [SECURITY] HEEL-G RUT

Include:

1. Description and impact
2. Reproduction steps or PoC (no public disclosure)
3. Affected commit / version if known

We will acknowledge within a few business days and coordinate a fix before any public write-up.

Never commit:

• HEELG_EVIDENCE_KEY or other HMAC secrets
• Cloud / SSH credentials
• Proprietary soil or field datasets you are not licensed to publish

Out of scope for “security” reports: academic disagreement with Bekker parameters, gate thresholds, or maturity labeling — please open a normal issue instead.