If you discover a security vulnerability, please report it responsibly:

1. Do NOT open a public issue
2. Email: security@prismer.ai
3. Include: description, reproduction steps, potential impact
4. We will acknowledge within 48 hours
5. We will provide a fix timeline within 7 days

• Authentication and authorization flaws
• SQL injection, XSS, CSRF vulnerabilities
• Container escape or privilege escalation
• Secret/credential exposure
• Dependency vulnerabilities (critical/high severity)