Please do not disclose vulnerabilities in a public issue. Use GitHub's private vulnerability reporting for this repository. Include affected versions, reproduction steps, impact, and any suggested mitigation.

Only the latest release is supported. Operators are responsible for network isolation, TLS termination, secret management, model supply-chain review, and timely base-image updates.