nadir-kernel/docs/SECURITY.md

Security Policy

Supported versions

Nadir is a hobby x86-64 kernel. Only the tip of main is supported.

Version	Supported
main	✅
Anything else	❌

If you report an issue against an old commit, please verify it still reproduces on current main first (make then make run in QEMU).

Reporting a vulnerability

Use a private security advisory This keeps the details private until a fix is ready.

Please include:

1. What you think is wrong and why it matters
2. Steps to reproduce and serial/VGA output or a -d int -no-reboot log.

Out of scope

• QEMU, SeaBIOS, firmware, host toolchain and host OS
• Denial of service by crashing
• Missing hardening as such