Please report security vulnerabilities privately by emailing the maintainers at the contact address in the repository profile, or by opening a draft security advisory on GitHub if you have access.

Please include:

• A clear description of the issue
• Steps to reproduce, if applicable
• Affected versions
• Any suggested remediation

We aim to respond within 7 days and will coordinate a fix and disclosure timeline with you.

We are especially interested in reports involving:

• Unauthorized access to local imported history
• Leakage of local raw transcripts or raw evidence off the device
• Native messaging host protocol vulnerabilities