Report vulnerabilities in this project or on https://rodrigocastilho.com/ privately. Do not open a public issue.

• Report: open a GitHub security advisory
• Languages: English, Portuguese
• Include: affected URL or file, reproduction steps, and impact.

A machine-readable version is published at /.well-known/security.txt (RFC 9116).

A statically exported personal website on GitHub Pages. The public discovery metadata under public/.well-known/ (OAuth/OIDC, MCP, agent, API) is in scope.