Security

The canonical security policy for this repository is in SECURITY.md at repository root.

Use that file for:

  • vulnerability reporting process
  • disclosure expectations
  • supported versions
  • self-hosting hardening baseline
  • audit checklist

For implementation-specific controls and architecture details, use: