If you discover a security issue related to Proof of Ship, please do not open a public issue with exploit details.
Report it privately to the maintainers through the contact methods available on the Spitfire Cowboy GitHub organization.
Please include:
- affected file, endpoint, or flow
- reproduction steps
- expected impact
- any suggested mitigation