Report vulnerabilities via GitHub private vulnerability reporting on this repository. Do not open a public issue for a live exploit.

Skill intake and trust-boundary rules: docs/INTAKE.md, skills/security-hardening/SKILL.md.