Security See docs/SECURITY.md for the full security model, compose API rules, and how to report vulnerabilities responsibly.