Report suspected secret or private-data exposure privately through GitHub security advisories. Do not open a public issue containing credentials or personal paths. This research code is not a production security boundary.