Do not report a vulnerability by opening a public issue when it may expose credentials, personal data, or an exploitable integration path. Use GitHub private vulnerability reporting when available.
The current release is a local reference implementation. It does not claim production certification. Before connecting an external system, review docs/security.md and docs/integration-contract.md.
如果问题可能暴露凭据、个人数据或可利用的集成路径，请不要创建公开 Issue。可用时请通过 GitHub 私密漏洞报告提交。
当前版本是本地参考实现，不宣称生产安全认证。连接外部系统前，请先审阅 docs/security.md 与 docs/integration-contract.md。