# Security Policy

## Reporting a Vulnerability

Please do not open public issues for suspected security vulnerabilities.

Email reports to `abdulrreshamwala@reclaimprotocol.org`, or use GitHub private vulnerability reporting when it is enabled for this repository.

Include as much of the following as you can:

- Affected component or path.
- Steps to reproduce or a proof of concept.
- Expected and actual impact.
- Any known mitigations.
- Whether the issue is already public.

## Response

Maintainers will acknowledge valid reports, investigate, and coordinate fixes or disclosure timelines as appropriate. Please give the project reasonable time to respond before sharing details publicly.

## Scope

Security reports should focus on vulnerabilities in this repository's code, images, configuration, and documentation. Please avoid sending secrets, private access tokens, or sensitive third-party data.