Do not put credentials, signing keys, device backups, calibration, or private network details in issues or pull requests. For a sensitive defect, use GitHub's private vulnerability reporting if enabled, or contact the repository owner privately before disclosing details.

The kit executes no device operations. Its host check runner executes code in the selected checkout. Review untrusted checkouts before running checks. Agent prompts cannot enforce hardware isolation; use the developer's normal sandbox and device access controls.