The Scoutica Protocol is currently in early draft phase (v0.1.x).

Security is a primary pillar of the Scoutica Protocol, given that it deals with sensitive candidate employment data.

If you discover a security vulnerability or a theoretical attack vector in the protocol specifications (e.g. Sybil attacks, privacy leaks, agent auth bypasses), please DO NOT disclose it publicly via GitHub Issues.

Instead, please report it privately:

1. Send an email outlining the vulnerability to the repository maintainers or create a private GitHub Security Advisory.
2. Include steps to reproduce the vulnerability or a detailed explanation of the theoretical attack vector.
3. Provide any potential remediation steps if you have them.

We will try to acknowledge your report within 48 hours and provide a timeline for addressing the issue.

Thank you for helping keep the candidate ecosystem safe!