Security

Report a security concern.

Please report suspected vulnerabilities privately and avoid accessing data that is not yours.

Reporting

A monitored security email and response policy will be published before public launch. The machine-readable security contact file remains intentionally unclaimed until that inbox exists.

Scope

The public site contains no administrator interface. Private administration is planned as a separate service with independent authentication, authorization, audit, monitoring, and recovery controls.