Email the security contact recorded in this repository's owner profile, or open a GitHub security advisory (Security tab → Report a vulnerability). Do not open a public issue for security findings.

Include: affected component, reproduction steps, and impact assessment. You will receive an acknowledgment within 5 business days.

• Credential vault: reports involving the KMS envelope-encryption boundary (ADR-0007) are treated as critical.
• Tenant isolation: any cross-user data access is a P1 by definition (ADR-0002/0004) and is handled under the portfolio incident-response standard with a committed postmortem.
• LLM prompt content: user-supplied rubric/profile text is untrusted input (ADR-0009); injection bypasses of the output contract are in scope.
• Fair-share dispatch and cost caps: any bypass letting one user starve another's due work, or spend past a per-user/platform budget ceiling (ADR-0018, tenancy/budget.py), is a P1 — denial-of-wallet and noisy-neighbor starvation are both economic-availability incidents.