Please do not open a public issue for a suspected security vulnerability. Contact the project owner privately through the contact details on sectioncuts.com.

• Never commit .env files, API keys, passwords, or private keys.
• Use a temporary Tandem test model and a dedicated, revocable webhook secret.
• Do not enter client or production credentials into the hosted demo.
• Revoke test credentials when testing is complete.