Security fixes are applied to the latest published version.

Please do not publish credentials, private business records, exploit details, or personal data in a public issue. Use GitHub's private vulnerability reporting feature for this repository when available. Include affected version, platform, reproduction steps, and expected impact.

• The renderer runs with contextIsolation, sandboxing, and Node integration disabled.
• SQLite queries run in the Electron main process through parameterized statements.
• Production network requests and unexpected navigation are blocked.
• The release database is read-only and is checked for historical business tables and local paths.
• No customs account, login session, or credential is required or supported.