SAGA A2UI is in development and has no supported release yet.
Do not put credentials, personal information, private service responses, or exploitable details in public issues. Maintainers should use a restricted private coordination channel for sensitive reports until a public reporting route is established before release.
Security claims must name the supported library paths and tested host/renderer combination. Content policy does not sandbox arbitrary application JavaScript or replace server authorization.