Do not disclose a suspected vulnerability in a public issue.

Report vulnerabilities through the private advisory form for the affected repository. For EMILIA Gate, Protocol, the reference deployment, or uncertainty about scope, use the emilia-protocol private reporting flow.

The current support policy, threat model, and assessment register live in the core repository.