Found a way to get past Kira's checks (the admin, staff or MCP routes, token handling, moderation, the governance and election flows)? Please report it privately, not in a public issue.

• On GitHub: Security tab → Report a vulnerability (private vulnerability reporting).
• Or tell a maintainer privately on Horizon's Discord.

Please include what you did, what happened, and what you expected. No real members' data in the report.

We read every report, fix it on main (which deploys Kira), and credit you if you want. Only the latest main is supported.

Leaked a token by accident (yours or ours)? Say so at once, the same way: a token is rotated, not just deleted.