elektrine/SECURITY.md

Security Policy

Supported Versions

Security fixes are currently provided for:

• main branch (latest commit)

Reporting a Vulnerability

Please do not file public GitHub issues for security vulnerabilities.

Instead:

1. Email maintainers at security@elektrine.com.
2. Include reproduction steps, impact, and affected components/apps.
3. If possible, include a minimal proof of concept.

You should receive an initial response within 72 hours.

Disclosure Process

1. We acknowledge receipt and assess severity.
2. We prepare and validate a fix.
3. We coordinate disclosure timing with the reporter.
4. We publish a fix and release notes.

Scope Notes

This policy applies to all umbrella apps under apps/.