Security fixes apply to the latest version of the main branch.

Please do not disclose suspected vulnerabilities in a public issue. Use the repository's Security tab to submit a private vulnerability report with:

• A clear description of the issue and its potential impact
• Steps or a minimal example that reproduces the problem
• The affected files, routes, or components
• Any suggested mitigation, if available

Reports will be reviewed as time permits. This demonstration project is not intended to process real employee, personnel, or confidential business data.