Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability, please report it responsibly:

Do NOT create a public GitHub issue
Email ian@allowayllc.com with details
Include steps to reproduce if possible
Allow 48 hours for an initial response

Supported Versions

Version	Supported
Latest	✅

Disclosure Policy

We follow responsible disclosure. Once a fix is available, we will:

Patch the vulnerability
Release a new version
Credit the reporter (if desired)

There aren’t any published security advisories