隐私、数据与安全
Security, Account Protection and Vulnerability Reporting Policy
Security expectations, prohibited abuse and a responsible path for reporting vulnerabilities.
最后更新： 2026年9月2日
适用对象： All visitors and users
重要提示： 本文件是产品政策和风险管控声明，不是针对个人的法律建议。它不意味着放弃任何不可放弃的权利，也不应被理解为所列的每部法律都适用于每个司法管辖区。
Security baseline
- Use least privilege, secret separation, rate limits and repository-enforced infrastructure boundaries.
- Do not expose internal state services or credentials publicly.
- Preserve auditability for security-relevant changes and incidents.
Research and reporting
Good-faith vulnerability reports should describe the issue and reproduction safely without accessing unnecessary user data, persistence, extortion, destructive testing, credential harvesting or disruption. Authorization for security testing is not implied by this policy.