Please report a suspected vulnerability privately through GitHub Security Advisories. Public test cases must use synthetic data.
Evidence labels do not prove that a test is honest or complete. Integrators remain responsible for designing an observation that really measures the named layer and for protecting the evidence source before it reaches this library.