# Security Policy

If you believe you have found a security issue in the Polyester TypeScript SDK,
do not open a public issue.

Email security reports to `security@polyester.com` with:

- affected package version or commit
- impacted API, generated type, or helper
- reproduction steps or proof of concept
- potential impact

We will acknowledge valid reports and coordinate remediation before public
disclosure.