This alpha is a local, single-user tool. Keep it on loopback; do not expose the HTTP server directly to a public or shared network. Avoid untrusted local processes with access to the same files.

Please use GitHub's Report a vulnerability entry on this repository's Security page for sensitive reports when enabled. If that channel is unavailable, open a minimal issue asking for a private reporting channel without publishing exploit details, tokens, project state or chat contents. No response-time guarantee is offered.

Include affected version, minimal synthetic reproduction, impact and any suggested mitigation. Never include credentials. Supported fixes target the latest public alpha; older versions have no backport promise.