# Security Policy for agent-observability

## Supported Versions

| Version | Supported |
|---------|-----------|
| 0.x     | Yes       |

## Reporting a Vulnerability

Please do NOT open a public GitHub issue for security vulnerabilities.

Follow the AumOS organisation security disclosure process:
https://github.com/aumos-ai/.github/blob/main/SECURITY.md

You will receive an acknowledgement within 72 hours and a resolution
timeline within 7 business days.

## Scope

- Remote code execution
- Privilege escalation
- Sensitive data exposure
- Denial of service in server contexts

Out of scope: issues requiring physical access, social engineering,
or already-known vulnerabilities in transitive dependencies (please
open a regular issue for dependency updates).
