# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability please report it privately
rather than opening a public issue.

**Contact options:**

1. **Email:** jjn1056@gmail.com

Please include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Any suggested fixes (optional)

## Supported Versions

Only the latest release receives security updates.

## Regulatory Note

PAGI is non-commercial open source software, exempt from EU Cyber Resilience
Act (CRA) requirements. Organizations integrating PAGI into commercial products
are responsible for their own regulatory compliance.
