Security policy

Do not report vulnerabilities through public GitHub issues. Email security@openleash.com with reproducible details and affected versions. Never include customer source code, provider keys, prompts, or OpenLeash tokens.