See the root SECURITY.md for the full policy, reporting channels, response-time commitments, supported-versions matrix, scope, self-hosting checklist, and regulatory-reporting obligations under EU Regulation 2024/2847 (Cyber Resilience Act).

Report vulnerabilities privately via GitHub Security Advisories or by email to info@datadrivenconstruction.io.