If you discover a security vulnerability in Nexus AI Terminal, please report it responsibly:

Email: xavier@thyfwxit.com

What to include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Your suggested fix (optional)

Response timeline:

• Acknowledgment within 48 hours
• Assessment within 7 days
• Fix deployed within 14 days for critical issues

Please do NOT:

• Open a public GitHub issue for security vulnerabilities
• Exploit the vulnerability beyond what is necessary to demonstrate it
• Access or modify other users' data

This policy covers:

• The Nexus AI Terminal at thyfwxit.com/nexus/
• The API at api.thyfwxit.com
• This GitHub repository

Security researchers who report valid vulnerabilities responsibly will be credited (with permission) in the changelog.