This preview processes local files and bundles native engines. Keep originals and install only a release whose source and integrity you reviewed. The installer is unsigned; a checksum confirms file identity, not universal safety.

Use Report a vulnerability on the repository's Security tab. Share a minimal reproduction and impact, avoiding personal data and credentials. Do not post exploit samples or sensitive originals in public issues. If private reporting is unavailable, ask for a private route without disclosing vulnerability details.

Ordinary defects and features belong in Issues. Include the exact preview version and Windows build. No support period or response-time commitment is implied.

Sources are verified, jobs use private staging, outputs are collision-safe, and archive/media policies restrict unsafe paths and delegates. Changes to these boundaries need review. Manifests describe bundled versions; components retain their own update and licensing obligations.