Arcloom currently supports only its own controlled synthetic lab. Do not attach arbitrary execution tools or use it against real systems without a separately reviewed and authorized assessment design.

Report application security problems privately to the repository owner. Include a minimal synthetic reproduction, revision and expected/actual behavior. Do not publish access tokens, .env, production data or private evidence. See the security model for trust boundaries and deployment requirements.