Report sensitive issues privately to 1200km@gmail.com.

Do not open a public issue for sensitive source material, active infrastructure, exposed credentials, or unsafe reproduction steps.

Default coordinated disclosure window: 90 days.