If you discover a security vulnerability, please report it responsibly:

1. Do not open a public GitHub issue
2. Email the maintainers directly or use GitHub's private vulnerability reporting
3. Include a description of the vulnerability and steps to reproduce

We will acknowledge your report within 48 hours and provide a timeline for a fix.

This agent processes publicly available financial data. However:

• Never commit Azure credentials, API keys, or connection strings to the repository
• Use environment variables or Azure Managed Identity for all secrets
• The Bing Grounding tool may send queries to external services — review Microsoft's data handling policies