v0.1.5 — security reporting boundary

mdabydeen released this 27 Sep 18:20

· 8 commits to main since this release

dbdb786

What changed

Added SECURITY.md with a private-first reporting path and a clear scope boundary.
Linked the policy from the README.
Explicitly states that Stopline is experimental and not a production security control.

Verification

11/11 unit tests pass
TypeScript typecheck passes

Assets 2