# Security Policy

## Supported Versions

This project is under active development. Security fixes are applied to the latest code on the default branch.

## Reporting a Vulnerability

For sensitive security reports, please use GitHub Security Advisories:

<https://github.com/majiayu000/harness/security/advisories/new>

If the issue is not sensitive, you may open a regular GitHub issue.

When reporting, include:

- affected component or crate
- impact and attack scenario
- minimal reproduction or proof of concept
- suggested remediation (if available)
