Send vulnerability reports to contact@aevonix.com. Include the FlashAlign revision, engine and version, affected configuration, and a minimal reproduction using synthetic identities and requests.

Do not include signing keys, authentication headers, real conversations or contact records. Keep exploitable reports private while we investigate and coordinate a fix. Do not post those details in a public issue.

See the security model for trust boundaries and deployment requirements. The current V1 release is the supported line.