If you believe you have found a security vulnerability in this project, please report it responsibly.

• Do not open a public GitHub issue for security-sensitive bugs.
• Email security@otfabric.io, or open a private security advisory on GitHub: Security → Advisories → Report a vulnerability.

Include a clear description, steps to reproduce, affected versions, and the impact. We will acknowledge your report and work with you on a fix and disclosure timeline.