If you discover a security vulnerability or a taint bypass technique, please do not open a public issue. Email the maintainer directly via your configured GitHub security contact or open a GitHub Security Advisory.

Include:

1. Proof-of-Concept payload.
2. Target agent phase / capability bypassed.
3. Observed vs expected policy outcome.