QuranPrompter is offline-first, but still protects firmware and sacred-content integrity.

Please privately report vulnerabilities involving:

• update-signature bypass,
• arbitrary firmware execution,
• content-package integrity bypass,
• USB attack surface,
• unsafe charging/power behavior,
• mechanisms that could silently alter displayed Qur’an text.

Until a dedicated security email exists, open a GitHub Security Advisory rather than a public issue for exploitable vulnerabilities.

The project does not use DRM to restrict legitimately open content. Signing exists to distinguish trusted release artifacts and detect corruption, not to prohibit forks.