We take the security of the MPLP Protocol seriously. If you discover a security vulnerability, please follow these steps:

1. Do NOT open a public issue.
2. Email the details to [email protected].
3. Include:
   • Description of the vulnerability.
   • Steps to reproduce.
   • Affected components (e.g., specific schema, runtime module).

• We will acknowledge receipt of your report within 48 hours.
• We will provide a status update every 5 business days.
• Once resolved, we will publish a security advisory and credit you (if desired).

This policy applies to:

• MPLP Protocol Specifications (Schemas)
• Reference Runtime (@mplp/runtime-minimal)
• Core Libraries (@mplp/core, @mplp/coordination)
• Official Integration Adapters (@mplp/integration-*)