We support the latest main branch. Please ensure you are on the latest commit before reporting an issue.

• Do not open public issues for security vulnerabilities.
• Email security reports to: academy@junaidi.ai (or open a private security advisory on GitHub if enabled).
• Include reproduction steps, affected components, and any PoC.
• We will acknowledge receipt within 72 hours and provide a remediation timeline.

We follow responsible disclosure. We appreciate coordinated disclosures that give us time to patch before public release.

This policy covers code in this repository. Do not test against third-party services or infrastructure without permission.