NERV HEADQUARTERS — SECURITY DIVISION
Protocol: Vulnerability Disclosure
Classification: RESTRICTED

If you discover a security vulnerability in NERV-CODE, please report it responsibly.

1. Do NOT open a public issue for security vulnerabilities
2. Email the maintainers or use GitHub's private vulnerability reporting
3. Include:
   • Description of the vulnerability
   • Steps to reproduce
   • Potential impact
   • Suggested fix (if any)

• Acknowledgement within 48 hours
• Status update within 7 days
• Fix timeline communicated once assessed

This project is a research and fan project that restores and themes the Claude Code CLI. Security concerns most relevant to this project include:

• Build system integrity (supply chain)
• Credential exposure in source or configuration
• Injection vulnerabilities in theming modifications

• Vulnerabilities in the upstream Claude Code product (report to Anthropic)
• Vulnerabilities in Node.js, Bun, or other dependencies (report to respective projects)

_{NERV — Maintaining the integrity of Terminal Dogma}