Responsible Disclosure

If you find a security vulnerability in Mint Recursive, the Mint Recursive client SDK (mindlab-toolkit), or any public Mint Recursive repository, please report it privately so we can fix it before it becomes public.

How to report

Send an email to security@mindlab.ltd (or contact@mindlab.ltd if security@ is not yet set up for your case) and include:

• A description of the vulnerability and what it could affect.
• Steps to reproduce, including affected versions, endpoints, and any specific configuration.
• Any proof-of-concept code or logs. Mask credentials before sending.

Please do not open public GitHub issues for security reports.

What to expect

• We will acknowledge your report within 5 business days.
• We will work with you on a fix-and-disclosure timeline, typically 30–90 days depending on severity.
• Once a fix is shipped, we will give you public credit if you consent.