Report vulnerabilities privately through GitHub's security reporting interface for blackscaletech/iwu when available. Do not include sensitive inference inputs, outputs, credentials, or customer data in a public issue.

Measurement-integrity issues—registry manipulation, verifier bypass, duplicate episodes, hidden retries, identity collisions, or evidence tampering—are also in scope. Maintainer: @blackscaletech.