Security

Responsible disclosure and safe operational guidance.

Please report security issues privately. Provide reproduction steps, impact assessment, and any suggested fixes.

This project makes decisions that can affect real users. Always monitor false positives, start conservative, and keep an override/appeal path.

Keep your API keys secret. Apply rate limiting at the edge. Prefer deterministic policies over opaque rules.