# Security Policy

## Supported Versions

| Version | Supported |
|---------|-----------|
| 7.6.x   | ✅ Yes    |
| 7.5.x   | ✅ Yes    |
| 7.4.x   | ✅ Yes    |
| 7.3.x   | ✅ Yes    |
| < 7.3   | ❌ No     |

## Reporting a Vulnerability

**Please do not open a public GitHub issue for security vulnerabilities.**

Report security issues privately to: **kiexpert@kivilab.co.kr**

Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if you have one)

You will receive a response within **72 hours**. If the issue is confirmed, we will:
1. Work on a fix
2. Notify you before public disclosure
3. Credit you in the release notes (unless you prefer anonymity)

## Scope

- **In scope**: launcher source (`csharp/src/WKAppBot.Launcher/`), build scripts, CI workflows
- **Out of scope**: third-party dependencies (report to their maintainers directly)
