Hy-Memory/SECURITY.md

Security Policy

Please do not disclose vulnerabilities, credentials, private conversations, or personal data in a public issue. Submit a private report through GitHub Security Advisories. If private vulnerability reporting is unavailable, do not open a public issue containing sensitive details; wait for the repository maintainers to enable a private channel. This project does not publish a security-reporting email address.

Include the affected component (Hy Memory SDK or MemHub), version or commit, reproduction conditions, impact, and any known mitigation.

Security fixes prioritize the default branch and the latest published version. No fixed acknowledgement or remediation SLA has been adopted yet. MemHub-specific security and privacy boundaries are documented in memhub/SECURITY.md and memhub/PRIVACY.md.