# Security

Report suspected vulnerabilities privately to the repository owner. Do not
include secrets, personal data, exploit payloads, or restricted source
material in a public issue.

All acquired content is untrusted input. Publication remains disabled until
the repository's validation and release controls have been reviewed.
