Please report vulnerabilities with a private GitHub security advisory when that feature is available for this repository. Do not open a public issue containing a real API key, bridge token, private repository content, or exploit details that expose another user's local service.

The integration is intended for a single account holder on loopback. A shared, LAN-exposed, tunneled, or hosted inference proxy is outside the supported security boundary.

Operational guidance and the trust model are documented in docs/SECURITY.md.