# Security Policy

## Supported Versions

| Version | Supported          |
| ------- | ------------------ |
| 0.1.x   | :white_check_mark: |
| < 0.1.0 | :x:                |

## Reporting a Vulnerability

If you discover a security vulnerability in cortexa, please report it responsibly by emailing **swadhinbiswas.cse@gmail.com** with the following information:

- Description of the vulnerability
- Steps to reproduce
- Affected language(s) and version(s)
- Impact assessment

**Please do NOT open a public issue for security vulnerabilities.** Responsible disclosure helps protect all users of the project.

## Response Timeline

- **Acknowledgment** — within 48 hours of receiving the report
- **Initial assessment** — within 1 week
- **Fix and disclosure timeline** — agreed upon with the reporter on a case-by-case basis

## Scope

This security policy covers all 7 language implementations of cortexa:

- Python
- JavaScript
- Rust
- Go
- Zig
- Lua
- Elixir