Please do not disclose security-sensitive issues in a public GitHub issue.

Until a private reporting channel is configured, contact the repository owner through GitHub and request a private communication channel.

The current alpha:

• does not inject code into other processes;
• does not install a driver;
• does not save captured screen content;
• does not transmit captured screen content;
• runs with the current user's privileges;
• provides an emergency tray command to remove the overlay.

The current alpha has not yet completed a formal security review and must not be treated as production-ready assistive software.