Security-sensitive reports
Do not publish exploit details, credentials, private keys, production data or unrestricted diagnostics. Ordinary email has no end-to-end-encryption claim. Agree on a specific secure transfer method before sending sensitive supporting material.
Public bugs and feature requests
Sanitized public reports belong in axoldb/feedback. Never include credentials, instance archives or private paths.