Please report security issues privately by opening a GitHub security advisory rather than a public issue. We will acknowledge receipt within a reasonable timeframe and keep you informed of remediation progress.

Tri-Net v2 is a research artifact, not a certified medical device. It must not be used for real clinical diagnosis without appropriate regulatory approval and clinical validation. Do not commit credentials (e.g., kaggle.json) — they are git-ignored by default.