Do not open a public issue for security vulnerabilities.

Report privately via GitHub Security Advisories or email the project maintainer.

Include:

• Clear description of the vulnerability
• Steps to reproduce (if applicable)
• Affected repository and file(s)
• Potential impact assessment

We aim to respond within 72 hours.

This policy applies to:

• Rift-Network
• Rift-L1-Blockchain
• agave-abiv2-memory-contexts
• agave-rift-scheduler

UltraCore-RFT is a documentation repository and does not contain executable code.