This repository is a research and experimentation codebase. Security reporting is most relevant for:

• arbitrary code execution vectors introduced by tooling or launch scripts
• unsafe default behaviors in environment setup or batch launch paths
• exposure of sensitive local paths, data, or secrets through logging utilities

The repository is not positioned as a production federated learning platform or a hardened blockchain deployment. Research-grade model behavior, attack simulation logic, or benchmark outcomes are generally not treated as security vulnerabilities by themselves.

Please report vulnerabilities privately to the maintainers rather than posting exploit details publicly in an issue. Include:

• affected file(s) and operating system
• a concise description of the issue
• reproduction steps
• expected impact
• any temporary mitigation if known

Maintainers should acknowledge a report, investigate reproducibility, and coordinate a fix or mitigation note where appropriate.