Security and privacy fixes are applied to the latest release.

Please use GitHub private vulnerability reporting. Do not open a public issue for a bug that could expose local transcripts, credentials, paths, or other private data.

Useful reports include the affected version, operating system, reproduction steps, and a minimal synthetic fixture. Do not attach real session history.