Report security issues responsibly.
LoopGuard separates account authorization, device trust and local permissions. This policy explains safe reporting and testing boundaries.
Report a security issue
Use the LoopGuard support form and choose Security report. Include the affected surface, reproducible steps and impact, but do not include passwords, access tokens, private keys or unnecessary personal data. We will acknowledge and triage actionable reports and may request additional non-sensitive evidence.
Testing boundaries
Test only accounts and devices you own or have explicit permission to test. Do not access another user’s data, perform denial-of-service testing, degrade production, use social engineering, exfiltrate data, or exploit a finding beyond the minimum needed to demonstrate it. Developer execution is off by default; if a user enables it, approved developer tools can launch project-defined child processes and can use the operating-system file or network access available to those tools. It is not a sandbox boundary.
Security response
Use the LoopGuard support form for security reports and choose Security report. Good-faith research that follows these boundaries will not be treated as abuse solely because it identifies a vulnerability; this does not authorize testing of third-party systems or other users.