Reporting
Please include the affected URL, a concise reproduction path, and the impact you believe the issue has. Avoid destructive testing, credential harvesting, denial-of-service testing, or accessing data that does not belong to you.
Site posture
- Static HTML export served behind TLS.
- No reader accounts, checkout flow, public upload form, or analytics beacon.
- Security headers are documented in the colophon.
- Public source links on articles point to the project repository for editorial transparency.