Security contact

Report a security issue privately.

Please do not post suspected vulnerabilities in a public issue. Send the affected route or file, reproduction steps, expected and observed behavior, and potential impact.

Include timestamps and whether document content, API keys, or generated artifacts may have been exposed.