If you discover a security vulnerability, please report it responsibly:
- Do not open a public GitHub issue
- Email rushil@rushilkaul.com with details
- Include steps to reproduce if possible
- Allow reasonable time for a fix before public disclosure
- Acknowledgment: Within 48 hours
- Assessment: Within 1 week
- Fix: Depends on severity, typically within 2 weeks for critical issues