Please report vulnerabilities privately to tarik@n3tz.ai.

Include the affected URL or file, reproduction steps, impact, and any suggested mitigation. I will acknowledge a useful report as soon as practical and coordinate disclosure with you. Please do not include secrets or personal data in a public issue.

The canonical machine-readable contact is /.well-known/security.txt.