Responsible disclosure

Report suspected vulnerabilities in public DCW websites through the contact form with the subject “Security”. Do not include secrets in the initial message if they can be rotated first.

Privileged IRISH endpoints are intentionally separate from this site. Public demos are mocked and read-only. They must not call owner filesystems, live GitHub writes, terminals, or control bearers.