# Security Policy

## Reporting

Please report security issues privately through GitHub's security advisory interface instead of opening a public issue.

## Data and credentials

GPT-5.6 Switcher reads model metadata from Pi's in-process model registry. It does not read Provider credential files, transmit telemetry, or persist tokens. Model authentication and request routing remain owned by Pi and the selected Provider.