Security fixes target the latest V1 release. Keep process stops as confirmed manual actions, and treat AI advice as a suggestion rather than proof that a task is safe to stop.

Use GitHub's private vulnerability report for problems involving process protection, identity checks, credentials, or private data. Do not put API keys, passwords, personal paths, or exploit details in a public issue.

Include the app and macOS versions, the affected feature, reproduction steps using synthetic data where possible, and the expected result. Ordinary usability bugs can go in Issues.