Interim policy notice
Responsible Disclosure
Please avoid accessing other users' data, disrupting systems, or publicly disclosing an unremediated issue.
How to report
A verified security contact address is not configured in the repository. The owner must provide a monitored disclosure address and response process before this can become a full responsible-disclosure program.
Safe research
Use the public demo or your own authorized workspace. Do not test destructive actions, attempt credential access, exfiltrate data, bypass authentication, or degrade availability.
These are interim notices based on the deployed application's visible implementation. Owner-controlled legal details remain pending. See required legal inputs.