Protect continuity. Contain harm.

A permission for one person, Presence or purpose must not become access to another. The same boundary applies to people, models, integrations and company operators.

Account and service recovery should preserve legitimate identity and work while respecting revoked credentials and permissions. A restored backup cannot silently restore a revoked right.

A current, approved reporting channel and its handling terms must be published before inviting sensitive security submissions. Do not place credentials or private personal data in a public conversation.