Diskard executes adversarial scenarios against AI applications. Use it only on systems you own or have explicit permission to test.

Do not open an issue for a vulnerability that could expose credentials, sensitive evidence or a working exploit against a deployed system. Create a private GitHub security advisory when available, or contact the repository owner privately.

Include the affected version, a minimal reproduction, expected impact and any suggested containment steps. Remove real customer data and secrets from the report.

Use synthetic identities and sandboxed tools by default. Persistent-memory tests must restore their baseline state even when execution fails.