Security fixes target the latest release published by this repository.

We take security seriously. Please do not open a public issue for security vulnerabilities.

Preferred channel:

• GitHub Security Advisories (private disclosure, tracked with the codebase)

• Affected Desktop release tag or CLI version
• Reproduction steps
• Impact assessment
• Any suggested mitigation

We will acknowledge your report and provide an initial assessment as soon as we can.

We will coordinate with you on disclosure timing once a fix is ready.