Security Policy

Stygian uses coordinated vulnerability disclosure and tracks support windows by release line.

The authoritative policy lives in the repository root:

• SECURITY.md

Quick Summary

• Report vulnerabilities privately via email (not via public issues)
• Current supported line: 0.13.x
• Initial acknowledgment target: within 72 hours
• Triage status update target: within 7 days

For full reporting requirements, SLAs, and disclosure details, use the root security policy document.