Please do not open a public GitHub issue for security-sensitive problems.

Instead, report the issue privately to the maintainer with:

• a short description
• affected area
• steps to reproduce
• impact assessment if known

Until a dedicated security contact and response workflow are published, please use a private channel you already have with the maintainer.

Portal is an input-forwarding prototype that currently works over a local network and uses macOS accessibility/input APIs. If you discover weaknesses in transport security, privilege handling, pairing, or installer-sharing behavior, those reports are especially valuable.