# Security Policy

Please do not use public issues for security reports.

## How to report

Send security reports to:

- Email: maxwelldhx@gmail.com
- GitHub: [@Horace-Maxwell](https://github.com/Horace-Maxwell)

## What to include

Please include as much of the following as possible:

- affected module or path
- product version or commit
- reproduction steps or proof of concept
- impact assessment
- whether secrets, credentials, or local data are involved

## Response expectations

We aim to acknowledge reports within 5 business days and follow up with next steps after initial triage.