Do not open a public issue for vulnerabilities, exposed credentials, sensitive infrastructure details, privacy incidents, or data released without authorization. Use GitHub private vulnerability reporting when enabled. If it is unavailable, contact a maintainer privately through their verified institutional contact listed in the repository metadata.

Include the affected component/version, impact, reproduction information that is safe to share, and suggested mitigation. Do not include operational credentials or unnecessary sensitive field details.

Security concerns may affect software, model artifacts, data pipelines, edge deployments, supply-chain dependencies, dataset access, anonymization, or the disclosure of critical-infrastructure information.

DASmartInfra outputs are research and engineering aids. They are not independently certified safety systems and must not be the sole basis for life-safety, structural-closure, emergency-response, legal, or regulatory decisions. Operational deployments require qualified engineering review, appropriate redundancy, validation, authorization, and compliance with applicable requirements.