Please report suspected vulnerabilities privately to Long Li at lilong0228@gmail.com with the subject MSPR security report.

Include the affected file or revision, impact, reproduction steps, and any suggested mitigation. Do not include real device identifiers, credentials, private capture paths, or Apple sample assets in a public issue.

The maintainer will review reports on a best-effort basis. Please allow time to confirm the issue before publishing technical details.

Security fixes target the latest revision on the default branch. Historical evidence files and archived benchmark results are retained for transparency but are not independently supported software releases.