Tinta documents, images, bundles, snapshots and imported data are untrusted. Security requirements define the threat model and required controls. No independent security audit has been completed.

Report vulnerabilities privately to roberto@planta7.io. Include steps to reproduce the issue and the affected version. Do not include private documents or exploit details in public issues.