Please report security problems privately, never in a public issue: open a private report on GitHub, or email support@onemana.dev with "Security" in the subject.

Include what you found, how to reproduce it, and the version affected. You will get a reply within 3 working days. Once a fix is released, we credit you in the release notes unless you ask us not to.

Supported versions: the latest release of each line, v2.x (main) and v1.x (without-ai).