Do not open a public issue for security vulnerabilities.

Use GitHub's private vulnerability reporting: https://github.com/Hilbras/Keystone/security/advisories/new

Include:

• Affected version/commit and deployment context
• Step-by-step reproduction or proof of concept
• Impact assessment

You will receive an acknowledgment within 48 hours. We coordinate disclosure with a target patch release within 90 days, and credit reporters by default (opt out at any time).

See docs/SECURITY.md for the full security model, hardening checklist, and operational guidance.