Do not commit credentials, secrets, production data, or sensitive local authoring sources.

Security-sensitive runtime adapters and permission changes should be reviewed with evidence appropriate to their blast radius.

Please do not open a public issue for a security vulnerability. Use GitHub's private vulnerability reporting flow:

https://github.com/riottt/deeprail/security/advisories/new

Include the affected version or commit, a minimal reproduction, impact, and any proposed mitigation. If private reporting is unavailable, contact the repository owner through the GitHub profile and do not disclose exploit details publicly until a fix is available.