If you discover a security issue in Canon, please report it responsibly:

• Email: contact@gfrancodev.com
• GitHub: Open a private security advisory on the repository.

Please include as much of the following as you can:

• A clear description of the issue and where it occurs
• Steps to reproduce, including version, OS, and runtime (Cursor, Claude Code, Codex, etc.)
• Impact assessment and any proof-of-concept you are comfortable sharing
• Suggested fix or mitigation, if you have one

Do not disclose the issue publicly until we have had a chance to review and address it.

We aim to acknowledge reports within a few business days and will work with you on remediation and disclosure timing.