Report vulnerabilities privately to security@solidsf.com. Do not open a public issue for credentials, authorization bypasses, unsafe model loading, or code execution findings.

Generated agent documents must never contain IDE authorization material, API keys, model weights, training examples, private endpoints, or private solidSF interfaces.