# Security Policy

## Supported Versions

| Version | Supported          |
| ------- | ------------------ |
| 1.0.x   | :white_check_mark: |
| < 1.0   | :x:                |

## Reporting a Vulnerability

Please report vulnerabilities to the security team via email.

---

## Cybersecurity Engineering Best Practices

For comprehensive security architecture patterns, mitigations, and learnings from system audits (including SSRF prevention, command injection mitigations via `--`, Git protocol safeguards, Jinja2 autoescape requirements, verified SSL contexts, and cryptographically secure dynamic secret defaults), see [Cybersecurity Engineering Best Practices](docs/security/best_practices.md).