Never include Ambush OAuth tokens, model-provider credentials, channel secrets, webhook URLs, Hermes authentication files, memories, sessions, or runtime state in this repository or in an issue report.

Report suspected vulnerabilities privately to support@ambush.ai. Include the affected version and reproduction details, but redact credentials and personal feed or emission data.