# Security Policy

This project is intended for community use. Please report security issues responsibly.

## Reporting a Vulnerability

Please **do not** open a public GitHub issue for security reports.

Instead, use one of the following private channels:

- **GitHub Security Advisories** (preferred):  
  Go to the repository → **Security** → **Report a vulnerability**
- If Security Advisories are not available for your repo, contact the repository owner via GitHub.

## Scope / Notes

This project:
- does **not** bundle third-party proprietary software
- does **not** expose network services
- executes privileged operations only via **polkit-protected helpers**

This project is open-source and licensed under GPLv3.

Reports are reviewed on a best-effort basis.
