Do not submit real secrets, provisioning links or account identifiers to public issues. For a sensitive report, use the repository's private security advisory feature when available. The privacy and implementation boundaries are documented in docs/SECURITY.md. This static generator has no sign-in verifier or user database.