Security

SECURITY.md

Security policy

This repository is a reference implementation. Do not use placeholder tenant IDs, database IDs, domains, OAuth settings, or secrets in production.

Reporting a vulnerability

Open a private security advisory in GitHub or contact the repository maintainers listed in CODEOWNERS.

Please include:

affected package or runbook
tenant/environment boundary involved
reproduction steps
expected and actual behavior
whether secrets, tenant data, deployment credentials, or D1 state are affected

There aren't any published security advisories