SUPPORT.md

# Support

Use the repository issue tracker for reproducible defects, validation false positives, packaging defects, documentation corrections, and compatibility problems.

Include the Plugin version, validation output, host surface, and a minimal reproduction. Do not include credentials or private repository contents in support reports.

## Security Vulnerabilities

If you suspect a security vulnerability or sensitive defect, do not open a public issue. See [SECURITY.md](./SECURITY.md) for private reporting instructions, trust-boundary guidance, and fail-closed reporting steps.