# Security Policy

## Supported Versions

This project is currently in alpha pre-release (`0.1.0.dev*`).
Security fixes are applied on the main development line.

## Reporting a Vulnerability

Please report suspected vulnerabilities privately by email:

- ge.vargasn@gmail.com

Do not create a public GitHub issue for undisclosed vulnerabilities.

## What to Include

- A clear description of the issue.
- Impact and affected components.
- Reproduction steps or proof of concept.
- Suggested mitigation (if available).

## Response Process

- Acknowledgement target: within 72 hours.
- Initial assessment target: within 7 days.
- Remediation timeline depends on severity and scope.

When possible, we will coordinate disclosure timing with the reporter.
