# Security Policy

## Supported version

Security and robustness fixes are currently applied to GerberGuard-MBT 0.1.x.

## Reporting

Use the GitHub repository's security-reporting channel when available. For a
normal malformed-input bug, open an issue with a minimal synthetic Gerber
fixture and the exact CLI command used.

Do not attach confidential board layouts, customer manufacturing files,
credentials, personal information, or proprietary Gerber data. Replace such
inputs with the smallest synthetic command stream that reproduces the issue.

## Security boundary

Gerber input is treated as untrusted. The project enforces input, command-count,
word-size, and extended-block limits and reports malformed input without an
intentional panic. GerberGuard is still a supported-subset structural checker;
it does not certify file safety, manufacturability, or Gerber conformance.