Use this early release on a trusted, single-user computer. Do not expose its local services through a public tunnel or bind model servers to public interfaces. Protect the host account, model runtime and client configuration.

For a suspected vulnerability, use GitHub's private vulnerability reporting when available. Otherwise open a minimal issue asking for a private reporting channel without exploit payloads, source data, credentials or identifying details.

The release review and its limits are recorded in SECURITY-REVIEW.md. Heuristic screening and redaction can miss sensitive information. This software is not an operating-system sandbox or a system-wide data-loss-prevention service.