A verified public contact route is being established. Until then, do not send private keys, payment data, unpublished source files, or sensitive personal information.
Translation corrections should identify locale, string key, current wording, suggested wording, and reviewer context.
Security reports need a verified reporting route before public security.txt claims are published.