# Vulnerability Disclosure Policy

Security is the core priority of Snigdha OS Decentralized. We welcome responsible disclosures from researchers, developers, and independent auditors.

---

# Reporting Guidelines

If you discover a security vulnerability or network leak:

1. Report Privately: Do not open a public issue on GitLab or disclose details publicly before a fix has been released.
2. Encryption: Encrypt all vulnerability reports using the Snigdha OS Security OpenPGP key.
3. Contact Address: Send reports to security@snigdhaos.org.
4. Key Fingerprint: 2BDB 00AE 6CAB EF0E 4052 0A8F 553F D42B 02A8 211A.

---

# Report Information Checklist

Please include:

• Description of the vulnerability and its potential impact.
• Exact reproduction steps, script, or proof-of-concept.
• Affected subsystem (Amnesia, NetGuard, Persistence, Isolation, etc.).
• Proposed mitigation if available.