Please report vulnerabilities privately to hi@cloudbtl.com. Do not open a public issue containing API keys, document contents, decision logs or customer-specific descriptors.

JevRAG sends option cards to the configured decision-model endpoint. Review producer payloads and masking rules before using a new descriptor kind with confidential data.