Please do not publish suspected vulnerabilities, credential exposures, or unsafe parsing cases in a public issue before the maintainer has had a chance to assess them.

Report them to security@yycore.ai with:

• the affected commit and module;
• a minimal reproducer that contains no sensitive corpus data;
• the observed impact; and
• any suggested mitigation.

Chi is pre-1.0 research infrastructure and does not have a guaranteed response time. Receipt will be acknowledged when possible, and confirmed issues will be coordinated privately before disclosure.