DirectGTM-Labs is an early-stage independent laboratory. There is no stable production service or guaranteed security-response SLA declared by this policy.

For a suspected vulnerability or exposed secret, email contact@mingmingcodes.com privately. Include the repository, affected commit or version, a concise description, potential impact and a minimal reproduction using synthetic data when possible.

Do not post credentials, exploit details affecting others, private contact records or confidential client information in a public issue. Do not test a third-party service without authorisation.

Reports are handled on a best-effort basis. No bounty or supported-version schedule is currently promised. Each repository may publish a more specific security policy as its implementation matures.