Report suspected vulnerabilities privately through the affected repository's Security → Report a vulnerability page or email contact@tertius.cc. Include the affected revision, a minimal reproduction, and the possible impact.

Do not include real credentials, private research data, or third-party material you cannot redistribute. Maintainers will coordinate investigation and any necessary disclosure.

Use GitHub issues for ordinary bugs and questions. A repository's own SECURITY.md takes precedence over this default policy.