docs: add security and store review guidance

2026-07-29 19:30:58 +10:00
parent 51edff809a
commit e61ee85885
3 changed files with 214 additions and 0 deletions
@@ -0,0 +1,18 @@
+# Hudra Security Policy
+
+Please report suspected Hudra vulnerabilities privately by emailing
+support@napper.au with the subject **Hudra security report**.
+
+Include:
+
+- the Hudra version and browser version;
+- the affected feature;
+- clear reproduction steps; and
+- the potential security or privacy impact.
+
+Do not include passwords, authentication details, student records or private
+lesson content. Use a minimal synthetic example if content is needed to explain
+the issue.
+
+Please do not disclose a suspected vulnerability publicly before the Hudra
+maintainers have had a reasonable opportunity to investigate and respond.