Please do not disclose potential vulnerabilities in public issues. Report them privately to the project maintainers with a minimal reproducer, affected revision, and impact. Triad is experimental and is not certified for safety- or security-critical deployment.