CodeTrail has no executable release and no supported runtime version yet.
Do not place exploit details, learner files or personal information in public issues. A private vulnerability-reporting channel, acknowledgement target, supported-version policy and incident procedure must be configured and verified before public executable releases. Non-sensitive planning concerns may be raised publicly without exploit/private data.
The initial threat boundaries are in the architecture plan. Runtime containment, dependency audits and adversarial checks are pending; this policy does not claim those controls are implemented.