# Security Policy

Stygian uses coordinated vulnerability disclosure and tracks support windows by release line.

The authoritative policy lives in the repository root:

- [SECURITY.md](https://github.com/greysquirr3l/stygian/blob/main/SECURITY.md)

## Quick Summary

- Report vulnerabilities privately via email (not via public issues)
- Current supported line: `0.13.x`
- Initial acknowledgment target: within 72 hours
- Triage status update target: within 7 days

For full reporting requirements, SLAs, and disclosure details, use the root security policy document.
