ZeroID production readiness is controlled by docs/production/zeroid-v1-readiness-gate.md.
Required security references:
docs/security/key-custody.mddocs/security/threat-model-v1.mddocs/security/incident-response-runbook.mddocs/compliance/dpia-v1.md
Report security issues privately to the project owner. Do not include credentials, tokens, private keys, or personal identity documents in issue trackers or public logs.