If you discover a security vulnerability, please report it responsibly:

1. Do not open a public issue
2. Email the maintainer directly (see pyproject.toml for contact)
3. Include:
   • Description of the vulnerability
   • Steps to reproduce
   • Potential impact
   • Suggested fix (if any)

You can expect:

• Acknowledgment within 48 hours
• Status update within 7 days
• Credit in the fix (unless you prefer anonymity)

The Docker image runs with:

• User-level permissions (not root)
• GPU access via nvidia-container-toolkit
• Mounted volumes for input/output data

• WANDB_API_KEY: If using Weights & Biases logging, this is forwarded into containers. Keep your API key secure.

This project depends on several external tools and libraries. Security updates to these dependencies are tracked via Dependabot.