Security Response Workflow¶

Privately acknowledge reports, preserve confidentiality, reproduce safely, assess severity and affected versions, prepare a minimal fix and regression test, coordinate an advisory and patched release, rotate exposed project credentials if applicable, and publish remediation guidance after users can upgrade. Never request reporter secrets or production datasets.