Please use this repository's Security → Report a vulnerability flow to send a private report. Do not open a public issue for anything that could expose a Steam sign-in token, signing credentials, private files on the Mac or iPad, the Mac helper's pairing key, or a practical code-execution path.

Include:

• the AgePad version or commit;
• iPad model, iPadOS version and macOS version;
• a minimal reproduction;
• the expected impact; and
• logs with Steam account names and IDs, personal paths and tokens removed.

Never upload game files, saves, AgePad-mine.ipa, Steam files, provisioning profiles, certificates or private keys as proof.

General crashes and gameplay problems should use the public bug template instead.