NotYVOS is experimental software and is not intended to be relied on as a hardened or production operating system. Use test environments and avoid sensitive data.

Please report suspected vulnerabilities privately when possible. Contact the maintainer through the contact options on https://github.com/NotY215, or use GitHub's private vulnerability reporting feature for this repository if it is enabled.

Please include:

• A concise description and potential impact.
• Affected commit, branch, build, or component.
• Reproduction steps or a proof of concept that does not expose other people's data.
• Any suggested mitigation, if known.

Do not open a public issue containing exploit details before the maintainer has had a reasonable opportunity to assess the report. Do not include real credentials, private keys, or other people's data.

This is a maintainer-led project and does not promise a fixed response or remediation timeline. The maintainer will assess reports as time and information permit and may request additional details. Please allow time for investigation before publicly disclosing details.

There is currently no formal long-term support policy. The safest starting point for evaluation is the latest repository state, but the latest state is not guaranteed to be secure or suitable for production use.