If you discover a security vulnerability in ClawGuard Shield, please report it responsibly:

1. Do NOT open a public GitHub issue
2. Email michno.jrg@gmail.com with:
   • Description of the vulnerability
   • Steps to reproduce
   • Potential impact
3. You will receive an acknowledgment within 48 hours
4. We aim to release a fix within 7 days for critical issues

• Minimal dependencies (only requests)
• API key validation at constructor time
• Request timeout protection
• No eval(), no dynamic code execution
• All inputs sanitized before API transmission
• Python 3.9+ required (no EOL runtimes)

This policy covers:

• The clawguard-shield PyPI package
• The Python SDK source code in this repository

For vulnerabilities in the Shield API itself, please report to the same email address.