Report security issues privately to the maintainers before opening a public issue.

Use GitHub Security Advisories for private reports: https://github.com/Winter-Soren/meshkit/security/advisories/new.

MeshKit security-sensitive changes require tests for success, failure, and abuse cases. Cryptographic behavior must include test vectors when practical.