Please report suspected vulnerabilities privately through GitHub Security Advisories for this repository. Do not open a public issue for a vulnerability.

Never include Host or Watch private keys, Agent Adapter secrets, full Ariava configuration files, access tokens, unredacted logs, or production pairing material in a report. Use generated test identities and redact device, account, host, and filesystem information.