English | 한국어

Security fixes target the latest commit on main. Historical portfolio snapshots and deployed demo revisions are not maintained as separate supported versions.

Please use GitHub private vulnerability reporting for a suspected vulnerability. Do not include credentials, personal data, private cloud identifiers, or exploit details in a public issue.

Include the affected component, reproduction conditions, expected impact, and a minimal safe proof of concept when available. Reports are reviewed on a best-effort basis; this portfolio project does not provide a production service-level agreement.

Public issues remain appropriate for ordinary defects that do not expose sensitive information.

The policy covers the source, synthetic demo services, infrastructure definitions, and GitHub workflows in this repository. The project intentionally rejects actual-production connectivity and does not authorize testing against third-party or Google Cloud systems you do not own.