Do not disclose vulnerabilities through public issues. Use GitHub private vulnerability reporting when available or contact community@iicp.network.

Do not submit credentials, task payloads, production database contents, operator records, private endpoints or personal data. Protocol reports should use minimal synthetic reproductions and identify the affected version/profile.