skills/visual-truth/assets/visual-truth-package/SECURITY.md

# Security Policy

## Supported Release

Security fixes are provided for the current Visual Truth public release.

## Reporting a Vulnerability

Please report suspected vulnerabilities privately to info@ultimatedesignstudios.com. Include the Visual Truth version, affected framework and package manager, reproduction steps, and expected impact. Do not include production credentials or private customer data.

## Security Boundary

Visual Truth is a local development tool. It does not require a hosted backend or Visual Truth account. Keep the editor behind the documented development-only mount guard, review generated source before committing it, and do not expose a local development server to untrusted networks.