# Security Policy

## Supported Versions

| Version | Supported          |
| ------- | ------------------ |
| 4.0.x   | :white_check_mark: |
| 3.0.x   | :white_check_mark: |
| < 3.0   | :x:                |

## Reporting a Vulnerability

If you discover a security vulnerability or potential exploit in Q-TensorFormer (including model serialization, GGUF binary decoding, or remote code execution risks):

1. **Do not create a public issue**.
2. Contact the maintainer directly via Hugging Face community discussions or email.
3. Include:
   - A description of the vulnerability.
   - Minimal reproduction code or steps.
   - Potential impact and suggested remediations.

We take model safety, serialization integrity, and dependencies seriously and will acknowledge reports within 48 hours.