oatf 0.1.0

Rust SDK for the Open Agent Threat Format (OATF)
Documentation
# Security Policy

## Supported Versions

| Version | Supported |
|---------|-----------|
| 0.1.x   | Yes       |

## Reporting a Vulnerability

Please report security vulnerabilities through
[GitHub private vulnerability reporting](https://github.com/oatf-spec/oatf-rs/security/advisories/new).

**Do not** open a public issue for security vulnerabilities.

## Response Timeline

- **Acknowledgment**: within 48 hours
- **Critical patches**: within 7 days
- **Coordinated disclosure**: 90 days

## Scope

This policy covers the `oatf` library crate. Issues in the OATF specification
itself should be reported to the [spec repository](https://github.com/oatf-spec/spec).