Vulnerability Reporting

Status: TODO

Public contact: security@your-domain.example

TODO: publish coordinated disclosure policy and /.well-known/security.txt.