This project is a research prototype. Report vulnerabilities through a private GitHub security advisory, without including credentials, confidential documents, or personal data.

Operational use requires, at minimum: parser isolation, attachment scanning, URL validation, authentication, role-based authorization, secure secret management, request limits, audit logging, and retention policies.