# Security Policy

## Supported builds

TouchAI is in active development. The current focus is the default branch and the latest published release artifacts.

## Reporting a vulnerability

Please do not open public GitHub issues for security vulnerabilities.

Use GitHub private vulnerability reporting.

When you report a vulnerability, include:

- the affected version or commit
- the impact you believe it has
- clear reproduction steps or a proof of concept
- any suggested mitigation if you already have one

## Response expectations

We will try to acknowledge new reports promptly, confirm severity, and coordinate a fix before public disclosure whenever practical.
