Include.
- Affected URL, file, or commit.
- Reproduction steps and expected versus observed behavior.
- Impact, scope, and a safe contact method.
Report a security issue.
Send a concise, non-sensitive report to team@neorome.dev. Do not include credentials, personal data, or live exploit payloads.