Run active validation only against addresses marked authorized_target in range/manifest.json or range/vm-manifest.json. Do not add physical-LAN, localhost, public, or third-party targets. Report vulnerabilities in the range controls privately through GitHub security advisories after publication.

The vulnerable applications are intentional. A report that only restates an upstream training vulnerability is not a vulnerability in this repository. Isolation bypasses, target-guard bypasses, credential exposure, and unsafe orchestration are in scope.