Kjell Tore Guttormsen 9b49272446 docs(graceful-handoff): add SECURITY.md (org C-axis, round 3)

Repo had no vulnerability-reporting policy. Adds contact address,
response process, and a version-support statement scoped to the
current latest release (v3.2.1).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01T65wWn7QeSKZMFoUCeyXCK

2026-08-16 21:15:36 +02:00

1 KiB

Raw Blame History

Security policy

Reporting a vulnerability

Report privately to security@fromaitochitta.com - do not open a public issue. Canonical repository: https://git.fromaitochitta.com/open/graceful-handoff

Please include the affected version or commit, a minimal reproduction, and the impact you see. We acknowledge every report within 5 working days, agree a fix and disclosure timeline with the reporter, and aim to disclose within 90 days of the initial report.

Response process

Acknowledge within 5 working days.
Triage and confirm severity within 10 working days.
Develop and test a fix.
Publish an advisory and credit the reporter unless they prefer to remain anonymous.

Supported versions

Only the latest tagged release (currently v3.2.1) is supported and receives security fixes. Earlier tags are not maintained; upgrade to the latest release before reporting.

Advisories

Security fixes are noted in CHANGELOG.md. There is no separate advisory database for this repository.