Please report security issues responsibly.

• Open a GitHub issue for general security findings and lower-severity issues.
• If you believe the issue is high severity, contact admin@brumbelow.org directly.

When reporting, include:

• the affected component or command
• clear reproduction steps
• impact
• any relevant image reference, digest, or file path

Do not publish proof-of-concept details or active secrets before the issue has been reviewed.