Please report vulnerabilities privately through GitHub's security advisory interface for UOR-Foundation/calculator-example. Do not include credentials, tokens, or unpublished exploit details in a public issue.

Only the current main branch is supported before the first tagged release. Generated files are accepted as security evidence only when just vv succeeds in the pinned devcontainer and their hashes match SHA256SUMS.