Please report security issues privately via GitHub Security Advisories or email the repository owner.

Do not open public issues for undisclosed vulnerabilities.

This repo contains specifications and validation tooling only — no network services or production runtime.