Report suspected vulnerabilities privately to mail@ratspeak.org, or use GitHub private reporting when available. Do not open a public issue.

Include the affected commit, target/profile and a minimal reproduction. Use test identities; do not include real private keys or personal data.