This RC is not independently audited. Read security boundaries and coverage gaps.
Use Security → Report a vulnerability when available. If unavailable, use an available private GitHub contact channel rather than posting sensitive evidence publicly. Public issues are suitable for non-sensitive functional bugs.
Do not upload real documents, contact details, full personal paths, process dumps, original logs or personal screenshots. Use an invented minimal sample and redact environment identifiers. There is no security-support SLA or audit certification.