Report security issues to security@falconer.com.

Do not open public issues for vulnerabilities, exposed credentials, customer data, or OAuth/authentication problems.

When reporting an issue, include:

• A concise description of the issue.
• Affected files, manifests, or client setup path.
• Reproduction steps if safe to share.
• Any suspected impact.

This repository must not contain credentials, OAuth tokens, local MCP configuration, customer content, organization IDs, document IDs, screenshots containing private data, or local environment files.