# Security Policy

## Reporting a vulnerability

If you discover a security issue in **Alphacode** or this site, please report it privately.

- **Email**: tlbbeg313@gmail.com
- **GitHub**: open a [private security advisory](https://github.com/dragonked2/alphacode/security/advisories/new) on `dragonked2/alphacode`.
- **security.txt**: also see [`.well-known/security.txt`](.well-known/security.txt).

Please do **not** file public issues for security problems.

## What to include

- A clear description of the issue and its impact.
- Reproduction steps, proof-of-concept, or a minimal test case.
- The affected version(s).
- Your name / handle if you'd like to be credited.

## Response targets

- Initial acknowledgement: within **3 days**.
- Triage + plan: within **7 days**.
- Fix or mitigation: depends on severity; critical issues get an emergency release.

## Scope

This repo (`alphacli/alphacli.github.io`) is a static site. Most security issues will live in the product repo:
<https://github.com/dragonked2/alphacode>.

Thanks for helping keep users safe.