If you discover a security vulnerability in Logicaffeine, please report it responsibly.

Email: tristen@brahmastra-labs.com

Please do not:

• Open public GitHub issues for security vulnerabilities
• Disclose the vulnerability publicly before it has been addressed

We will:

• Acknowledge receipt within 48 hours
• Provide an estimated timeline for a fix
• Credit you in the release notes (unless you prefer to remain anonymous)

This security policy applies to:

• The Logicaffeine compiler (logos crate)
• The runtime library (logos_core crate)
• The verification module (logos_verification crate)
• The web interface

• Issues in dependencies (please report to the respective projects)
• Theoretical attacks without proof of concept