Report vulnerabilities privately through this repository's GitHub Security advisories. Do not post exploitable details in a public issue before a fix is coordinated.

HaulSense 0.8 is the supported development line. The local dashboard is loopback-only and must not be reverse-proxied onto the Internet or exposed to a LAN. The local process/user account is the trust boundary. No account, cloud reporting or telemetry upload is implemented.

Never attach Steam credentials, account identifiers or full user configuration to reports. Report game/device versions and only the necessary sanitized log excerpt.