ReallyMe Platform is security-sensitive infrastructure. Please do not disclose a suspected vulnerability in a public issue, discussion, or pull request.

Report vulnerabilities through GitHub private vulnerability reporting. Include the affected crate and version, the conditions required to reproduce the issue, its likely impact, and a minimal reproduction when it is safe to do so. Do not include live credentials, personal data, or production secrets.

Security fixes are made against the current release line. Users should run the latest published patch release; pre-release code and older patch releases do not receive separate security maintenance.