Please do not open a public GitHub issue for suspected security vulnerabilities. Email team@noisefactor.io with:

• the affected Sync commit and operating system,
• a description of the issue and potential impact,
• reproduction steps or proof-of-concept details, and
• relevant logs with tokens, origins, and personal information removed.

We will acknowledge reports as quickly as possible and coordinate fixes before public disclosure. Please give us a reasonable window to investigate and ship a patch before sharing details publicly.

Security fixes are currently made against the main branch. Sync has not yet published a stable binary release.