SECURITY.md

Rama main · réplica de lectura del repositorio original.

# Security Policy

## Supported Versions

Only the latest release receives security fixes.

| Version | Supported |
|---|---|
| Latest | ✅ |
| Older | ❌ |

## Reporting a Vulnerability

**Please do not report security vulnerabilities through public GitHub issues.**

Email us at **hello@dotstell.com** with:

- A description of the vulnerability and its potential impact
- Steps to reproduce or proof-of-concept
- Any suggested fix if you have one

We aim to acknowledge reports within **48 hours** and will keep you updated on the fix timeline. We ask that you give us reasonable time to address the issue before any public disclosure.

## Scope

- `dotstell.app` — the web application
- `github.com/dotstell/dotstell` — the desktop app and API

Out of scope: third-party services we rely on (Supabase, Vercel, Cloudflare).