Do not report vulnerabilities in public issues. Contact the repository owner privately.

Never commit Qwen or Alibaba Cloud credentials. Raw citizen narratives are processed in memory and must not be placed in logs or persistent storage.