Do not disclose secrets, client source or exploitable details in a public issue. Use Wavect's existing contact route at https://wavect.io/contact/ to request a private reporting channel. Do not send credentials or raw logs in that request.

Ernesto is a privileged observational mod, not a sandbox or enforcement layer. Its local artifacts can be fabricated or raced by another same-user process. Read docs/privacy.md and docs/evidence.md for the supported scope and limits.