# Security Policy

The Palimpsest License project takes security seriously. We appreciate your efforts to responsibly disclose your findings.

## Reporting a Vulnerability

If you discover a security vulnerability in any of our tooling, infrastructure, or documentation, please **do not** create a public GitHub issue.

Instead, please send an email to:
**security@palimpsestlicense.org**

Please include the following in your report:
- A description of the vulnerability.
- Steps to reproduce the issue.
- The potential impact of the vulnerability.

We will make every effort to acknowledge your report within 48 hours and will work with you to understand and resolve the issue promptly.