SECURITY.md

# Security policy

Report vulnerabilities through the public project home's private GitHub vulnerability
reporting route:

https://github.com/senyo888/the-fifth-ledger/security/advisories/new

Do not post exploit details, credentials, personal data, private repository content, or
confidential project evidence in a public issue. Public-safe support guidance is at:

https://github.com/senyo888/the-fifth-ledger/blob/main/SUPPORT.md

Reports may cover packaged skills, build and validation scripts, distribution
metadata, privacy or secret leakage, and behavior that contradicts the documented
authority boundary. The 5th Ledger is procedural guidance, not an enforcement or
security-certification system.