Use private vulnerability reporting. Source publication precedes signed installers; there is currently no supported signed end-user release.

Do not disclose exploitable vulnerabilities, credentials or private data in a public issue. Use this repository's Security → Report a vulnerability private reporting option. If that option is unavailable, do not post the sensitive details publicly; ask for a private reporting channel without describing the vulnerability.

The beta is not a security certification. Review agent permissions and repository changes before committing or publishing them. Security fixes will be distributed as newer signed app releases; do not disable macOS protections to install software.