Initial Vexta Core v0.1.0 release

SECURITY.md

@@ -0,0 +1,27 @@
+# Security Policy
+
+## Supported Versions
+
+Security updates are provided for maintained Vexta Core releases.
+
+Supported release information should be published with each stable release.
+
+## Reporting a Vulnerability
+
+If you discover a security issue in Vexta Core, please report it privately.
+
+Do not open a public GitHub issue for security-sensitive reports.
+
+Please include:
+
+- a clear description of the issue
+- steps to reproduce, if available
+- affected versions or commits
+- potential impact
+- any suggested mitigation
+
+A dedicated security contact will be added before the first public stable release.
+
+## Disclosure
+
+Security reports should remain private until a fix is available and affected users have had reasonable time to upgrade.