Please report security vulnerabilities by opening a GitHub Security Advisory on this repository. Do not open a public issue.

For the full threat model, blocked tool list, and security design rationale, see docs/security.md.