# Security policy

Please do not disclose suspected vulnerabilities in a public issue.

Use GitHub's **Security → Report a vulnerability** flow for this repository. Include the affected
version or commit, reproduction steps, impact, and any suggested mitigation. You should receive an
initial response within seven days.

Only the latest revision of `main` is currently supported. Never include real financial data,
credentials, or other secrets in a report or reproduction.