# Security Contacts

If you discover a security vulnerability, please report it responsibly.

## Reporting

- **Email**: security@star.ga
- **GitHub**: Open a [security advisory](https://github.com/star-ga/mind-mem/security/advisories/new)

## Response Time

- Initial acknowledgment: 24 hours
- Assessment and triage: 72 hours
- Fix timeline: depends on severity

## Scope

- All code in this repository
- MIND kernel files and configurations
- MCP server endpoints
- Workspace file handling
