Pathwise follows a rolling support model.

Please do not report security issues in public GitHub issues.

Use one of the following private channels:

1. GitHub private advisories: https://github.com/infocyph/Pathwise/security/advisories/new
2. Email: infocyph@gmail.com

When reporting, include:

• Affected Pathwise version
• Reproduction steps or proof of concept
• Expected impact and possible attack scenario
• Any mitigation you have already tested

• Initial acknowledgment target: within 3 business days
• Triage update target: within 7 business days
• Fix and disclosure timeline depends on severity and patch complexity

We will coordinate responsible disclosure and credit reporters when appropriate.