Do not disclose exploitable vulnerabilities in public issues. Report affected components, reproduction steps, impact, and suggested remediation to masterai918@gmail.com or Telegram @xuzongbin001.

Never include production credentials, player data, payment details, private keys, database backups, or live admin URLs in a report. Relevant areas include authentication, authorization, protocol parsing, memory safety, injection, randomness, administrative permissions, personal data, dependencies, and configuration exposure.

Do not test production systems or access other users' data without written authorization. The public repository has not been represented as having passed an independent production, fairness, privacy, or performance audit.