Security fixes are applied on a best-effort basis to the active main branch.

Please do not open public issues for sensitive vulnerabilities.

Instead, report privately to maintainers with:

1. affected component and file path
2. impact and severity assessment
3. reproduction steps or proof of concept
4. suggested remediation (if available)

1. Acknowledge receipt
2. Validate and triage severity
3. Prepare and test a fix
4. Release and document the patch

This project includes testing and research workflows; review integrations and generated artifacts before production use.