# Security Policy

## Supported Versions

| Version | Supported |
|---|---|
| latest `main` | Yes |
| tagged releases | Yes, if marked supported |
| old branches | No, unless stated otherwise |

## Reporting A Vulnerability

Report security issues privately to `1200km@gmail.com`.

Do not open a public GitHub issue for a vulnerability.

Default coordinated disclosure window: 90 days.

## Scope

This policy covers vulnerabilities in this repository's code, packaging, examples, and documentation. It does not cover third-party services, external APIs, or lab targets.
