Do not report vulnerabilities through public issues.

For now, send a private report through the contact channel listed at ai2human.io. Include the affected surface, reproduction steps, impact, and any suggested mitigation. Do not include real private keys, seed phrases, credentials, or personal identity documents.

AI2Human treats funding, proof integrity, authentication, verification, settlement, refunds, and operator privacy as security-sensitive surfaces.