If you discover a security vulnerability, please report it by emailing:

ryan.lindgren@gmail.com

Please do NOT open a public issue for security vulnerabilities.

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

• Acknowledgment: Within 48 hours
• Initial assessment: Within 1 week
• Fix timeline: Depends on severity, typically 1-4 weeks

We follow responsible disclosure:

1. Reporter notifies us privately
2. We assess and develop a fix
3. We release the fix
4. We publicly disclose the issue (with credit to reporter)

Thank you for helping keep AIDK secure!