Use normal professional conduct in this repository:
- Be specific and evidence-based.
- Keep discussion respectful and focused on the work.
- Do not post secrets, private customer data, exploit payloads, or confidential logs.
- Prefer reproducible reports over broad claims.
Security-sensitive reports belong in the private security reporting flow described in docs/security.md.