Use the repository’s private GitHub vulnerability reporting option when available. If it is unavailable, email victor@scalewithsearch.com with a minimal reproduction. Do not include credentials, private transcripts, or customer data in a public issue.

Reports against the current default branch receive review. There is no guaranteed response time or long-term release support.

This repository contains runtime components, guidance, and synthetic fixtures. Review each component's security policy before you connect private records or external services. The repository supplies no universal approval service. Enforce authorization where an action executes.

Keep tokens in environment variables or your secret store. Use temporary directories and synthetic data for tests.