---
name: Security Vulnerability
about: Report a security vulnerability (for non-critical issues only)
title: '[SECURITY] '
labels: security
assignees: ''
---

## IMPORTANT

**For critical security vulnerabilities, please do NOT use this template.**

Instead, report them privately by emailing the maintainers directly. See [SECURITY.md](../../docs/SECURITY.md) for details.

---

## Vulnerability Type
Select the type of vulnerability:
- [ ] Information Disclosure
- [ ] Input Validation Issue
- [ ] Configuration Issue
- [ ] Dependency Vulnerability
- [ ] Documentation Gap
- [ ] Other: _____________

## Description
A clear and concise description of the security issue.

## Impact Assessment
- **Severity**: Low / Medium / High / Critical
- **Attack Vector**: Local / Network / Adjacent
- **User Interaction Required**: Yes / No

## Steps to Reproduce
1. Configure agent-airlock with...
2. Call the function with...
3. Observe that...

## Suggested Fix
If you have a suggested fix, please describe it here.

## Environment
- **agent-airlock version**: [e.g., 0.1.0]
- **Python version**: [e.g., 3.11.0]

## Acknowledgment
- [ ] I understand that critical vulnerabilities should be reported privately
- [ ] I have checked that this is not a duplicate of an existing issue
