ILN is in experimental/testnet phase. Do not use current deployments as mainnet-secure infrastructure until the mainnet checklist, audits, and maintainer sign-off are complete.

For the complete policy, including component-specific vulnerability classes, severity definitions, response timelines, reporting instructions, and safe harbor, see docs/security.md.

Please do not disclose suspected vulnerabilities publicly before maintainers have had time to investigate and remediate them.

Report issues by either:

• Emailing security@invoice-liquidity-network.local
• Opening a private GitHub Security Advisory for this repository

We aim to acknowledge security reports within 48 hours.