Please do not open a public issue for a suspected credential disclosure, private-registry data leak, moderation bypass, or public-data integrity flaw. Use GitHub's private security advisory feature for this repository instead.

Supported code is the current main branch and the immutable runtime artifacts attached to its commits. Production callers pin an exact commit and digest; there is no support promise for unpinned snapshots.