No build from this repository is currently a supported public release. Security reports about source, release tooling, signing boundaries, or accidentally published sensitive data are still welcome.

Use GitHub's Report a vulnerability form under the repository Security tab. Do not open a public issue for credentials, private keys, signing material, personal data, exploitable device flaws, or supply-chain concerns.

Include the affected commit/path, impact, reproduction, and the minimum evidence needed to investigate. Remove unrelated user, network, location, and radio data.

The maintainer will acknowledge a valid report, preserve evidence privately, and coordinate remediation before public disclosure when appropriate.