Skip to content

Security: IAAUTECO-inc/Arngeir

Security

SECURITY.md

Security Policy (Vulnerability Disclosure Program)

Supported Versions

We provide security maintenance for the following versions:

Version Supported
Main (Edge) ✅ Yes
v1.0.x (LTS) ✅ Yes
< v1.0.0 ❌ No

Reporting a Vulnerability

Security and resilience are the pillars of this infrastructure. If you discover a vulnerability, please follow this professional disclosure process:

  1. Do not open a public issue.
  2. Send a detailed report to: security@your-domain.com (or via the GitHub Security tab).
  3. Include a Proof of Concept (PoC) and an assessment of the potential impact on system sovereignty.

Remediation Process

  • Acknowledgement: Within 24-48 hours.
  • Technical Assessment: Impact analysis on critical infrastructure and data integrity.
  • Resolution: Publication of a patch and, if applicable, a CVE (Common Vulnerabilities and Exposures) identifier.

There aren't any published security advisories