# Security Policy
## Supported versions
This is a verifier for [Attestix](https://github.com/VibeTensor/attestix) and
tracks the Attestix core 0.4.x release line. Security fixes land on the latest
released version.
| 0.4.x | yes |
| < 0.4 | no |
## Reporting a vulnerability
Please do NOT open a public issue for security vulnerabilities.
Report privately by either:
- opening a GitHub Security Advisory on this repository
(https://github.com/VibeTensor/attestix-rs/security/advisories/new), or
- emailing info@vibetensor.com.
Include a description, affected versions, and a reproduction if possible. We
follow coordinated disclosure: we acknowledge the report, work on a fix, and
credit you (unless you prefer otherwise) when the fix ships.