# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability in Juglans, please report it responsibly.

**Email:** security@juglans.ai

Please include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)

## Response Timeline

- **Acknowledgment:** within 48 hours
- **Initial assessment:** within 1 week
- **Fix & disclosure:** coordinated with reporter

## Scope

This policy applies to the latest release of Juglans and the `main` branch.

## Supported Versions

| Version | Supported |
|---------|-----------|
| Latest  | Yes       |
| Older   | No        |
