Report suspected vulnerabilities privately to security@bitgarth.app.

See bitgarth.app/security.html for the current security-reporting policy.

Do not disclose a suspected vulnerability in a public issue, discussion, or pull request.

Useful reports include:

• A clear description of the issue
• Steps to reproduce it
• The affected version
• Any logs, screenshots, or proof-of-concept details that help confirm the problem

We will acknowledge reports, investigate them, and publish fixes with clear release notes when user safety is affected.

For how BitGarth handles your data, see docs/user/security.md.