From 43e06da6f480863806aed763c9fb20b2628f74e4 Mon Sep 17 00:00:00 2001 From: s6pa1rta3n-lab Date: Mon, 31 Aug 2026 13:12:32 -0400 Subject: [PATCH] docs: explicitly define contract scope in SECURITY.md --- SECURITY.md | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 17d6fd4..72c6c43 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -26,7 +26,8 @@ issue to be triaged and, where applicable, patched before any public disclosure. ## Scope -In scope: the contracts under `contracts/` in this repository. Out of scope: -third-party dependencies (`soroban-sdk`, the Stellar network itself), and the -`contracts/demo-consumer` example, which exists to validate integration patterns -and is not intended for production use on its own. +In scope: the contracts under `contracts/` in this repository (`contracts/tholos` +and `contracts/tholos-v2`). Out of scope: third-party dependencies (`soroban-sdk`, +the Stellar network itself), and the integration examples (`contracts/demo-consumer` +and `contracts/asserter-consumer`), which exist to validate integration patterns +and are not intended for production use on their own.