Report vulnerabilities privately through GitHub security advisories. Do not open public issues containing credentials, proprietary battery data, or safety-sensitive facility information.