# Security Policy

## Supported Versions
The `main` branch is the supported baseline for security fixes.

## Reporting a Vulnerability
Please do not disclose vulnerabilities publicly.

Report security issues privately to the maintainers with:
- A clear description of the issue
- Steps to reproduce
- Impact assessment
- Any suggested mitigation

We will acknowledge valid reports and provide status updates during triage and remediation.