# Security reporting

Report suspected vulnerabilities privately to **jupitersstring@gmail.com** with `Security - AAP` in the subject. Send a non-sensitive summary first and arrange an appropriate private channel for details.

Do not open a public issue containing exploit details, credentials, private agreements, personal records or customer data. Do not test against third-party or production systems without their authorisation.

This public repository hosts static documentation. The private reference implementation is a development preview; no independent security audit or production safety certification is claimed. Contact the maintainers to agree a review scope and disclosure process. Response times and rewards are not promised.