TAK Bench is an authorized test harness, not an attack tool. Use it only against TAK/CoT systems you own or are explicitly authorized to test. Do not use it to disrupt availability, evade access controls, enumerate users, obtain credentials, or generate unbounded traffic.

Controlled stress, spike, and soak tests are permitted only in an isolated or approved staging environment with a written scope, an allowlisted target, explicit client limits, and an operator who can stop the run. Production is restricted to the guarded smoke policy documented in docs/safety.md.

Report security defects privately to the repository maintainers before public disclosure. Include the affected version, a minimal reproduction that does not target a third-party server, and any sanitized logs needed to reproduce the issue. Never include passwords, private keys, certificates, credential CSV data, package contents, or unredacted server responses.