Do not disclose exploitable vulnerabilities, credentials, private keys, packet captures containing sensitive data, or host-specific bypass details in public issues. Report them privately to the project maintainers using the contact channel configured before publication.

Include the affected commit, platform and kernel, reproduction steps, impact, and a minimal proof of concept when safe. Please allow maintainers reasonable time to reproduce, patch, test, and coordinate disclosure.

Ferrocrate is not yet a universal Docker replacement. The supported scope and known qualification boundaries are maintained in docs/FEATURE-MATRIX.md.