Do not post credentials, private documents or personal recordings in public issues. Use a private maintainer contact or a repository private vulnerability-reporting channel when one is available. A dedicated reporting route has not been configured for this source candidate; do not assume a public issue is confidential.

Provide the version, host, command and a minimal synthetic reproduction. No response-time guarantee or bug bounty is offered.

The kit does not upload output or collect telemetry. Your authoring agent has its own provider and data boundaries.