Please do not report security issues in public issues. Use GitHub's private vulnerability reporting for this repository if it is enabled. If it is not enabled yet, contact the repository owner privately through their GitHub profile and request a reporting address before sharing technical details. Do not include real chat exports or private conversation content in a report.

We will acknowledge reports as soon as practical and coordinate a fix and disclosure timeline with the reporter.

Reports are especially welcome for account isolation, access control, import handling, data deletion, and exposure of conversation content. This project is under active development; there is no guaranteed response time or bounty program.