add security policy

Author: justinxu421

SECURITY.md

@@ -0,0 +1,22 @@
+# Security Policy
+
+For the most up-to-date details on our security practices, certifications, and data handling, please visit:
+
+- https://www.augmentcode.com/security
+
+## Report a Vulnerability
+
+Please disclose security issues privately (do not open a public GitHub issue).
+
+- Email: [email protected]
+- Or via GitHub Security Advisories: Security → Advisories → “Report a vulnerability”
+
+We will acknowledge receipt as quickly as possible, triage the report, and keep you updated on resolution progress.
+
+## Scope / Supported Versions
+
+We actively triage and fix issues on the default branch (main) and the most recent release.
+
+## Responsible Disclosure
+
+We appreciate responsible disclosures and will credit researchers when appropriate. Thank you for helping keep our users and ecosystem safe.