Please report security issues privately to info@thierry-gilgen-ict.ch rather than opening a public issue.

We will acknowledge reports within a reasonable timeframe and work on fixes as appropriate.

Engawa v0.1 public endpoints are read-only. Do not deploy mutating tools without authentication and a separate security review.

See docs/security-model.md for the full threat model.