Use GitHub private vulnerability reporting for defects that permit permission widening, secret disclosure, host-language expression execution, unsafe command criteria, integrity bypass, unbounded execution, or unsafe resumption. Do not publish live credentials or private data.

Ordinary ambiguities and hardening proposals belong in public issues. Security fixes target the latest AGS 1.x maintenance release and include a regression fixture, threat-model update, and changelog entry.