Report vulnerabilities through GitHub private vulnerability reporting. Include the commit or version, operating system, reproducible steps, and a synthetic fixture. Never submit confidential documents.

The native source is a technical preview. Older published releases are separate historical implementations; do not assume their behavior or security fixes apply to this source.

• PDFs and images are hostile input. File, structure, decompression, text, and raster limits are enforced, but these do not prove complete isolation.
• Current source builds execute desktop and CLI document operations in bounded subprocesses. The CLI worker retains authorized filesystem access; the published CLI 4.0.0-preview.1 predates this milestone. See CLI controls and private desktop recovery retention.
• Originals are preserved. Save As refuses an existing destination and verifies a separately written PDF.
• Signed or encrypted inputs are refused for unsupported mutations.
• Embedded actions are inspected, never executed.
• Permanent redaction, sanitization, certificate signing, and OCR are not shipped native workflows.
• No document telemetry or remote processing is implemented.

Read the threat model, privacy contract, and dependency inventory.