If you discover a security vulnerability in Sensei, please report it responsibly.

Do not open a public GitHub issue for security vulnerabilities.

Instead, please email: diego.malamute.1@gmail.com

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

• Acknowledgment: Within 48 hours
• Initial assessment: Within 1 week
• Fix & disclosure: We aim to release a patch within 30 days of confirmation

1. You report the vulnerability via email
2. We acknowledge receipt and begin investigation
3. We work on a fix and coordinate disclosure timing with you
4. We release the fix and publicly disclose the vulnerability
5. We credit you in the release notes (unless you prefer anonymity)

Thank you for helping keep Sensei and its users safe.