# Security Policy

## Supported Versions

Security fixes are provided on a **best-effort** basis for the latest release.
Please include exact version information when reporting issues (Git tag / commit SHA, Docker image tag).

## Reporting a Vulnerability

Please **do not** open a public GitHub issue for security vulnerabilities.

Instead, report privately:
- Email: `patryk.ciechanski@patrykiti.pl`

Include as much of the following as possible:
- A clear description of the impact and the affected component (MCP server / Blender addon / router)
- Steps to reproduce (minimal PoC if possible)
- Environment details (OS, Blender version, Python version, Docker image/tag)
- Relevant logs (with any secrets removed)

## Disclosure

I will acknowledge receipt as soon as possible and work with you on a responsible disclosure timeline.
