Please report suspected security vulnerabilities via GitHub Security Advisories on codesphere-u/stackpulse rather than opening a public issue. Include:

• Affected component (stackpulse/ingest, stackpulse/server, etc.)
• Minimal reproduction payload or curl command
• Impact assessment

• All span, log, and metric payloads are validated via strict Pydantic v2 schemas (SpanRecord, LogRecord, MetricPoint).
• Bounded ring-buffer retention (max_traces, max_logs, max_metrics) prevents unbounded memory exhaustion from high-cardinality span floods.