If you discover a security vulnerability in apcore, please report it responsibly.

Do NOT open a public issue for security vulnerabilities.

Please use GitHub's private vulnerability reporting feature:

1. Go to the relevant repository's Security tab
2. Click Report a vulnerability
3. Fill in the details

Alternatively, email: team@aiperceivable.org

• Acknowledgment: Within 48 hours
• Initial assessment: Within 7 days
• Fix or mitigation: Depends on severity; critical issues targeted within 30 days

Older versions receive security fixes on a best-effort basis.

This policy covers all repositories under the aiperceivable GitHub organization that are part of the apcore standard.

We follow coordinated disclosure:

1. Reporter submits vulnerability privately
2. We confirm and assess the issue
3. We develop and test a fix
4. We release the fix and publish an advisory
5. Reporter is credited (unless they prefer anonymity)