We take the security and integrity of local developer environments very seriously.

If you discover a security vulnerability in Launchpad (such as bypasses of the SafetyGate, unintended path traversals, or non-TTY execution leaks):

1. Do NOT open a public issue.
2. Please email the maintainer directly at: ict21932@fot.sjp.ac.lk with the subject [SECURITY] Launchpad Vulnerability Report.
3. Include steps to reproduce, impact assessment, and any proof-of-concept scripts.

We will acknowledge receipt within 48 hours and work with you on a responsible patch and disclosure timeline.