Report vulnerabilities that can leak API keys, distort pulse scoring, or corrupt flow output through a private channel before public disclosure.
Useful reports include:
- the affected module
- the expected versus actual score or regime state
- whether the issue can promote an untradeable setup