This repository contains experimental and research-oriented security tooling. Treat all security claims as defense-in-depth ideas unless independently validated in the target environment.

Please do not disclose sensitive findings publicly. Open a private discussion or contact the maintainer through the repository owner and provide:

• affected version or commit
• reproduction steps
• impact assessment
• suggested mitigation if known

Do not include secrets, credentials, or personal/sensitive data in reports.

Reports will be reviewed and addressed as soon as practical. Security issues should be handled with reasonable caution and confidentiality while a fix is prepared.

Hashing, allowlists, telemetry checks, and local validation do not by themselves guarantee production security, compliance, or forensic admissibility. Independent review remains necessary for high-assurance environments.