Use GitHub's private vulnerability reporting flow for security issues in this project. Do not attach credentials, private evidence, production targets, or unredacted assessment data.

Ed25519 private keys generated by rtl keygen must be stored outside version control. Share only the public key and verify its SHA-256 fingerprint through an independent channel before trusting an evidence package.