SecureAI PolicyGuard is a security-sensitive AI application.

• We prioritize confidentiality, integrity, and traceability.

Do not disclose vulnerabilities publicly via Issues.

Instead:

1. Email
   [email protected]
2. Include:
   • Detailed vulnerability description
   • Steps to reproduce
   • Affected version / commit hash
   • (Optional) recommended fix

• You’ll receive an initial response within 48 hours,
  • and a full evaluation within 5 business days.

• Zero-trust architecture for API & encryption layers
• OWASP Top 10 compliance checks in every release
• CodeQL scans via GitHub Actions
• Integrated audit logging & policy verification

• No public disclosure without coordination
• CVE reference (if applicable) & changelog note after patch