Do not report security vulnerabilities through public GitHub issues.

Email security@rankupgames.com with:

• The affected repository and version or commit
• A concise description of the vulnerability and impact
• Safe reproduction steps that use synthetic data
• Any suggested remediation

Do not send production credentials, tokens, private keys, passwords, vault contents, or other secret material. If sensitive evidence is necessary, first ask for an approved secure transfer method.