Please report security-sensitive issues privately instead of opening a public issue.

This project is intentionally conservative:

• It uses supported enterprise policies as the primary mechanism.
• It refuses known unsafe policy categories such as Shield disablement, Safe Browsing allowlists, TLS warning bypasses, and update disablement.
• It defaults to dry-run mode.
• It creates restore backups before applying changes.
• It validates backup metadata before restoring registry or profile files.

When reporting an issue, include the BraveDebloater version or commit, Windows version, Brave version, command used, and any relevant backup metadata with personal paths redacted.