security-advisory-response

Respond to a reporter-filed GitHub Security Advisory with coordinated disclosure discipline: confidential triage, private-fork patching, simultaneous publish, post-mortem. Use when someone files a security advisory against this repo, OR when our own discovery (via .security-discoveries.jsonl) is escalated to a reporter-facing advisory. Triggers on "security advisory", "CVE response", "coordinated disclosure",…