- Do not file third-party controller defects here. Use
DISCLOSURE.md. - For OpenReconcile repos, use GitHub private vulnerability reporting once
enabled, or open a private report to the maintainers listed when
MAINTAINERS.mdexists. - Never include secrets, tokens, or customer data in issues.