# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability in okf-generator, please report it
privately **before** filing a public issue.

**Email:** umairbaig808@gmail.com

Please include:

- Description of the vulnerability
- Steps to reproduce
- Affected versions
- Any potential impact

You should receive a response within 48 hours. If you don't, please follow up.

## Scope

This policy covers the `okf-generator` PyPI package and the `okf` CLI tool.
It does not cover tree-sitter grammar dependencies or the OpenAI/llama.cpp
services you choose to connect to for LLM enrichment.

## Preferred Languages

We prefer all communications in English.
