Do not open a public issue for exposed credentials, unsafe workflow behavior, vulnerabilities, or accidentally committed sensitive data.

Use Security → Advisories → Report a vulnerability on the GitHub repository. Include the affected revision, impact, and safe reproduction steps. Never include live credentials or real patient data.

This is pre-alpha research software. It is not approved for clinical, safety-critical, or sensitive production use.