# Security Policy
## Scope
Shipcheck is a standards repository containing markdown templates, contracts, and adoption guides. It contains **no executable code**, collects **no data**, and makes **no network requests**.
## Reporting
If you find a security issue in the standards themselves (e.g., guidance that would lead to insecure implementations), please report it to:
**Email:** 64996768+mcp-tool-shop@users.noreply.github.com
## Response Timeline
| Step | SLA |
|------|-----|
| Acknowledge | 48 hours |
| Assess | 7 days |
| Fix / update | 30 days |