Security is a foundational pillar of NEXORA. If you discover a potential vulnerability, please report it responsibly:

1. Do not create public GitHub issues for zero-day vulnerabilities or security exploits.
2. Email the maintainers directly at security@nexora.dev (or via GitHub Private Vulnerability Reporting on the repository).
3. Include detailed steps to reproduce, affected versions, and proof of concept if available.

We acknowledge receipt of reports within 48 hours and provide remediation updates until a verified patch is released.