# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability in Empirica, please report it
responsibly by emailing **security@empirica-ai.com** (or contact the maintainer
via GitHub directly if email is unavailable).

Please do not file public GitHub issues for security vulnerabilities.

We aim to acknowledge security reports within 48 hours.

## Supported Versions

The latest minor version on the `develop` and `main` branches receives
security updates. Older versions may receive critical fixes at our discretion.

## Brand and Trademark Notice

**Empirica is an AI measurement framework. It has no cryptocurrency, token,
coin, or blockchain component of any kind.**

We are aware of unauthorized cryptocurrency tokens using the "Empirica" name,
including but not limited to:

- **$EMPIRICA on Solana** (contract `9B1uA2FwjFEredooPzgkDqoYtdFS3cv8vvpCXN8XBAGS`)
  — deployed January 2026 via rapidlaunch.io with metadata fraudulently linking
  to this GitHub repository. This token has no affiliation with Empirica AI GmbH
  or this project.

If you encounter a cryptocurrency, NFT, or blockchain product claiming
affiliation with Empirica or Empirica AI, **it is unauthorized**. We have
not issued, endorsed, or partnered with any such project.

If you have been misled or financially harmed by an impersonating token,
please contact us at security@empirica-ai.com with details — we maintain a
register of known impersonations and may be able to assist with reporting
to the appropriate platform.

To report brand/trademark misuse, contact: brand@empirica-ai.com

## Impersonation Reporting

If you discover a new impersonation of the Empirica brand (token, social
media account, fake website, etc.), please share:

- URL or contract address
- Screenshots
- Date of discovery
- Where you encountered it

Send to **brand@empirica-ai.com**.
