If you believe you have found a security issue, please report it responsibly.

• Email: security@lattice.app
• Include: detailed reproduction steps, impact assessment, and any proof of concept
• Please avoid public disclosure until we have confirmed and resolved the issue

We aim to acknowledge reports within 72 hours and provide a status update within 7 days.

This project is under active development. Security fixes are applied to the default branch.

In scope:

• Backend services and APIs
• Web application and authentication flows
• Infrastructure configuration included in this repository

Out of scope:

• Third-party services not managed by this repository
• Social engineering or physical attacks