Security Policy Reporting Please report vulnerabilities privately via GitHub Security Advisories for this repository. If you cannot access advisories, create a private issue and request it be converted, or contact a maintainer directly once listed. Do not disclose issues publicly until we release a fix or acknowledge it is safe to do so. Expectations We aim to acknowledge reports within 5 business days. Include steps to reproduce, affected versions/commit, and any potential impact. Scope Desktop app (Tauri/Rust) and frontend (React/TypeScript) code in this repository. For dependencies, report upstream if the issue is not caused by our usage.