Please report security vulnerabilities directly to nxme176@gmail.com with subject SECURITY: <repo>.

• We will acknowledge within 48h and provide a timeline for a fix.
• Please do not disclose publicly until a fix is released (coordinated disclosure, 90 days).
• Redacted NDA-related repos (Predictive, Plexta) — do not include confidential data in reports.

This policy covers all code in this repository. For enterprise deployments, contact the maintainer for private patch coordination.