If you discover a security vulnerability, please report it via GitHub Issues.

For sensitive issues, use GitHub's private security advisory feature: Security → Advisories → New draft security advisory

• Initial response: Within 7 days
• Status update: Within 14 days
• Resolution target: Within 90 days

This policy applies to the SDLC Studio skill and its templates.

Support tracks the current major: the latest major receives fixes of every kind, the previous major receives security fixes only, and anything older is unsupported. Restated at each major release.