This repository follows the CAP project-wide security policy. Please use GitHub Private Vulnerability Reporting on this repo (Security tab → Report a vulnerability) for any security issue, or email security@cap-protocol.example (placeholder until the project email is provisioned).

For the full disclosure timeline, severity classification, and CNA status, see the canonical policy in cooperative-agent-protocol/cap-spec/SECURITY.md.