SECURITY.md

Rama main · réplica de lectura del repositorio original.

# Security

Do not file public issues for vulnerabilities. Use this repository's **Private Vulnerability Reporting** / GitHub Security Advisory flow and include reproduction steps, impact, and affected version. That setting is enabled on this repository, so reports reach maintainers privately. Ferryman is not suitable for untrusted workers or high-sensitivity secrets; see `docs/THREAT_MODEL.md`.