SECURITY.md

Security notes

This repository intentionally contains custom Python model and tokenizer code. Loading it through Hugging Face Auto classes uses trust_remote_code=True.

Review custom code before running it. If consuming a third-party copy or fork, pin the revision parameter to a commit you reviewed.

The classifier output is a triage signal only. Do not use it as the sole basis for blocking accounts, isolating endpoints, or declaring an incident.