Report security concerns privately through this repository's GitHub private vulnerability reporting, or contact the repository owner if it is unavailable. Do not publish credentials, customer payloads or private CAPI artifacts.

This component has no ambient network or credential authority. Operators grant only Sigil's frozen semantic gRPC profile. Host failures must remain fail-closed; plugin result handling never authorizes an ALLOW decision by itself.