This repository is an experimental research prototype with no formally supported release. Security fixes may be considered for the current default branch. The project is not intended for operational flood response, emergency management, navigation, or other safety-critical decisions.

Please report suspected vulnerabilities through GitHub's private vulnerability reporting feature:

1. Open the repository's Security tab.
2. Select Advisories.
3. Select Report a vulnerability.
4. Include clear written reproduction steps, affected files or versions, security impact, and any suggested remediation.

Do not open a public issue for an undisclosed vulnerability. Do not include credentials, personal information, or third-party private data in a report.

• Test only systems, accounts, data, and deployments you own or are explicitly authorized to test.
• Use the minimum activity required to demonstrate impact.
• Do not perform denial-of-service testing, social engineering, phishing, spam, or destructive testing.
• Stop immediately if testing may affect another user, service availability, or third-party data.
• Report vulnerabilities in third-party dependencies to their upstream maintainers.

Please allow time for validation and remediation before public disclosure. Advisory credit may be provided to reporters who submit a valid, original finding and participate constructively in coordinated disclosure.