# Security Policy

## Reporting a Vulnerability

Please report security issues privately via GitHub Security Advisories for this repository.

Do not open public issues for vulnerabilities that may impact users.

## Response Targets

- Initial acknowledgment: within 2 business days
- Triage decision: within 5 business days
- Remediation timeline: communicated after triage
