Security Policy¶

Supported Versions¶

Version	Supported
0.1.x

Reporting a Vulnerability¶

Do NOT open a public issue for security vulnerabilities.

Email: security@arqon.dev

We aim to respond within 48 hours and will work with you to understand and address the issue.

Security Practices¶

• SLSA Level 3: Build provenance for all releases.
• SBOM: CycloneDX Software Bill of Materials for each release.
• Fuzzing: Continuous fuzzing of config parsing via cargo-fuzz.
• Dependency Auditing: cargo audit in CI.