# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability in Horizon, please do **not** open a public issue.
Instead, please report it privately by email:
**thysrael@gmail.com**

Please include:
- A clear description of the issue
- Steps to reproduce the problem
- The affected version, commit, or environment
- Any proof-of-concept, screenshots, or logs that may help

## Response Process

I will try to:

- Acknowledge receipt within **7 days**
- Investigate and validate the report
- Work on a fix and coordinate responsible disclosure when appropriate

## Supported Versions

Security updates are provided for the latest maintained version of Horizon.

## Disclosure Policy

Please avoid public disclosure until I have had a reasonable opportunity to investigate and release a fix.