Report vulnerabilities privately to the Bank of Bots maintainers.

• Do not open public issues for exploitable findings.
• Include reproduction steps, impact, and affected versions.

A dedicated disclosure channel and SLA will be published as part of public launch.