This framework is a reference guide for security hardening — it does not contain executable code, libraries, or software that runs. However, if you find:

• Inaccurate or dangerous guidance that could lead to security failures
• References to classified or proprietary information that should not be public
• Plagiarized content from proprietary sources
• Exploit-level detail that should not be in a defensive reference

Please report by opening a GitHub Issue with the security label.

For sensitive issues that should not be publicly disclosed, email the repository owner directly via the GitHub profile contact information.

• Acknowledgment within 7 days
• Triage and resolution proposal within 30 days
• No bug bounty program is currently offered

• Do not use this repository's issue tracker to report vulnerabilities in third-party systems, products, or services
• Do not submit 0-day exploits or offensive tooling as "vulnerability reports" — they will be rejected and reported to authorities