Report security issues through GitHub private vulnerability reporting when available. Do not include credentials, private prompts, transcripts, or customer data in a public issue.

RunMux logs may contain prompts and model responses. Runtime data is stored under ~/.runmux by default and is excluded from this repository. RunMux does not manage provider API keys; authentication remains owned by the provider CLI.