Report security issues privately to:

• dfredriksen@quantyra.org
• dfredriksen@cyint.technology

Do not open a public issue for credentials, private backend access, unpublished patent material, or exploitable vulnerabilities.

Security-sensitive material includes:

• API keys, OAuth tokens, IBM Quantum credentials, and cloud credentials;
• raw private correspondence or filing receipts that are not intended for public release;
• private patent-prosecution records;
• unpublished evidence packets marked internal or restricted.

Public issues are appropriate for reproducibility bugs, documentation gaps, deterministic verifier failures, and non-sensitive scientific questions.