Report suspected vulnerabilities privately to prowlr@proton.me with subject [CyberBox Security] <brief description>. Do not open a public issue.

Full policy (scope, disclosure window, hardening notes): cybersandbox/SECURITY.md.