Report security issues to yordereal@gmail.com. Response within 48 hours.

The agent never stores or logs private keys. All crypto signing is handled through Emblem Vault's authenticated API. Wallet passwords are read from environment variables only and never persisted to disk.