Ascend Flow can process sensitive conversation transcripts. Please do not open a public issue with private transcripts, API keys, gateway tokens, Meta client tokens, App Attest material, or deployment credentials.

If you find a security problem, use the private contact form at https://www.bishoptech.dev/contact and include a short description, reproduction steps, and the affected commit or release. Please allow time for a fix before public disclosure.

For local development:

• Keep OPENAI_API_KEY, ASCEND_GATEWAY_TOKEN, and ASCEND_SESSION_SECRET in local environment configuration only.
• Keep Meta CLIENT_TOKEN values in local Xcode settings or an ignored .xcconfig.
• Do not add real conversation transcripts, exports, device identifiers, or personal data to fixtures or screenshots.
• Review git diff --cached before pushing a branch or opening a pull request.