# Security Policy

## Reporting Vulnerabilities

Please do not disclose security vulnerabilities publicly before responsible disclosure.

Contact maintainers privately with:
- reproduction steps
- affected versions
- impact assessment
- proof-of-concept if applicable

## Scope

ChronoSeal intentionally operates as:
- anti-automation middleware
- behavioral attestation layer
- cryptographic continuity verifier

Security hardening evolves continuously.