Report security issues privately through GitHub Security Advisories after the repository is published. Do not include API keys, private captions, or captured audio in reports.

RTT stores provider credentials in the operating system credential store. Local mode never uploads audio. Selecting a cloud mode is explicit consent to send session audio or text to the named provider.