# Vulnerability Disclosure

Draft for review by qualified legal counsel. Not final legal advice.

Security reports should be sent to `security@ggsight.example`.

Reports should include affected version, reproduction steps, impact, and any relevant logs with secrets removed.

GGSight should acknowledge reports, triage severity, remediate, and credit reporters when appropriate.


