Use GitHub private vulnerability reporting: open Report a vulnerability on this repository's Security tab. If GitHub reporting is unavailable, email hraness@pm.me. Please do not open a public issue or pull request for a suspected vulnerability.

Include the affected file or URL, the steps to reproduce, and the impact you observed. We acknowledge reports within a few days and aim to ship a fix or a mitigation promptly after confirming the issue.

In scope: the code in this repository, the clankdar.com static site, and the check API under cloudflare/. Out of scope: reports that only show a model solving published practice puzzles, and issues in third-party services or in dependencies without a demonstrated impact on this project.

Only the current main branch and the deployed site are supported.