Email basic@intrface.eu with the affected revision, a concise description, and reproduction steps. Do not post credentials, personal data or exploit details in a public issue. We aim to acknowledge reports within 7 days and coordinate disclosure after triage and a reviewed fix. This is not a bug bounty program; no payment is offered. Please do not test against third-party systems or live farms without authorization.
Reports about this repository's software, development tools, hardware design files and documentation are in scope. There is no released or deployed product and no supported-release or security-update window yet. Development checks do not establish field readiness, regulatory conformity or operational security support. For the proposed supply process, see the vulnerability intake process and support-window statement.
The local software inventory and fixed-pattern secrets scan are limited development checks, not a security audit or release authorization.