# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability in a PezkuwiChain runtime or pallet,
please report it **privately**. Do not open a public issue.

- Email: security@pezkuwichain.io
- Encrypted reports welcome (PGP key on request).

Please include a description, affected crate(s)/runtime(s), and reproduction steps
where possible. We aim to acknowledge reports within 72 hours.

## Scope

This repository contains on-chain runtimes and FRAME pallets. Consensus, networking
and client-level issues belong to the framework project and the node release.

Bridge functionality (where present) handles cross-chain value; proof-verification,
message-replay and weight-accounting issues are treated as highest severity.