Please report security vulnerabilities through one of these channels:

1. Preferred: Email security@hyperpolymath.org with details
2. Alternative: Open a private security advisory on GitHub

What to include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if available)

Response timeline:

• Initial response: within 48 hours
• Status update: within 7 days
• Resolution target: within 30 days (depends on severity)

See .well-known/security.txt for additional contact information.