If you discover a security vulnerability in this project, please report it responsibly. Do not open a public GitHub issue for security vulnerabilities.

Instead, please send an email to security@ctrliq.com with:

• A description of the vulnerability
• Steps to reproduce the issue
• Any potential impact

You should receive a response within 72 hours acknowledging receipt. We will work with you to understand the issue and coordinate a fix and disclosure timeline.

A token that this server forwards, logs or leaks to a model is in scope, as is any way to make a tool act beyond what the caller's own Ascender token allows.

We follow coordinated disclosure. We ask that you give us a reasonable amount of time to address the issue before making any information public.