AI Law Framework: reporting a security problem

If you think you have found a security problem on ailawframework.com, tell us so we can fix it.

How to report
- Use the enquiry form at https://ailawframework.com/enquiries and start the message with "Security".
- Describe what you found, the address it affects and the steps to reproduce it.
- Do not include client or confidential information. The form is not a safe place for it.

What to expect
- We aim to acknowledge a report within 5 business days (Australia/Sydney).
- We will tell you when it is fixed, and credit you if you want that.
- This is a small team. We cannot offer a bounty.

Please do
- Test only with your own account and your own data.
- Stop and tell us if you reach someone else's data.

Please do not
- Run denial-of-service or high-volume automated tests.
- Use social engineering, or attack our staff or suppliers.
- Publish details before we have had a reasonable time to fix the problem.

We will not take legal action against good-faith research that follows this policy.

Out of scope: findings that need a rooted device or a stolen session, missing best-practice headers with no demonstrated impact, and the content of the legal library (use the enquiry form for that).