Report security concerns privately to security@mirogate.com.

Do not include production form submissions, user records, API keys, or operational logs in public issues. Use synthetic examples when discussing validation or submission behavior.

The worker example includes baseline honeypot and rate-limit hooks. It is not a full abuse-prevention system.