Do not open public issues for vulnerabilities, leaked credentials, or tenant data exposure. Report them privately to the Foundry maintainers with affected version, reproduction steps, and impact. Rotate exposed credentials before reporting them.

Foundry treats repository source, embeddings, prompts, and findings as tenant confidential data. Production operators must configure authentication, a tenant resolver, encrypted storage, and a managed secrets provider.