See Privacy and security for GraphPaper's storage, credential, network and desktop boundaries.

Do not include credentials, private manuscripts, Codex account files or unredacted database archives in public reports. Report a security-sensitive issue privately to the repository maintainer through an established contact channel; ordinary reproducible bugs can use GitHub Issues.

The Windows binary is currently unsigned. Verify release provenance and checksums; they are not a substitute for publisher signing or a security audit.