If you believe you have found a security vulnerability in this specification or its reference tooling:

1. Prefer GitHub’s “Private vulnerability reporting” (Security Advisories) if enabled for this repository.
2. Otherwise, email the maintainers at security@omnisstream.dev.

Please include:

• A clear description of the issue and potential impact
• Reproduction steps or a proof of concept
• Any suggested mitigations

Maintainers will acknowledge receipt within 7 days and will provide a status update as the issue is investigated.

This policy covers the content in this repository, including:

• Specification documents (*.md)
• Protobuf schemas (proto/)
• Test vectors (test-vectors/)
• Reference tools (tools/validator/)