Please report security issues through GitHub security advisories.

Do not paste private API docs, customer data, production tokens, unpublished OpenAPI specs, or sensitive internal endpoints into public issues. Use a minimal redacted example when reporting parser or scoring problems.