Please report security issues privately instead of opening a public issue.

Email github@zhengru.cloud with:

• the affected version or commit;
• reproduction steps;
• the expected impact;
• any suggested mitigation.

Codex Beacon sends only task identifiers, titles, states, attention flags, and elapsed time to bonded BLE displays. It does not send prompts, tool arguments, file contents, responses, or credentials.