Add SECURITY.md with vulnerability reporting instructions

.gitignore

@@ -36,6 +36,7 @@
 !GEMINI.md
 !LICENSE
 !README.md
+!SECURITY.md
 !vcpkg-configuration.json
 !vcpkg.json
 

SECURITY.md

@@ -0,0 +1,66 @@
+# Security Policy
+
+## Our Commitment
+
+We always provide secure software to users via the latest release. The Live Background Removal Lite team takes the security of our software seriously, and we appreciate your efforts to responsibly disclose vulnerabilities.
+
+## Supported Versions
+
+We provide security updates for the following versions:
+
+| Version | Supported          |
+| ------- | ------------------ |
+| Latest  | :white_check_mark: |
+| Others  | :x:                |
+
+We recommend using the latest version available from our [releases page](https://kaito-tokyo.github.io/live-backgroundremoval-lite/) to ensure you have the most up-to-date security fixes.
+
+## Reporting a Vulnerability
+
+If you find a vulnerability, please report it to us immediately. We appreciate responsible disclosure and will work with you to resolve any security issues promptly.
+
+### How to Report
+
+**Email:** [umireon+security@kaito.tokyo](mailto:umireon+security@kaito.tokyo)
+
+When reporting a vulnerability, please include:
+
+- A clear description of the vulnerability
+- Steps to reproduce the issue
+- Potential impact of the vulnerability
+- Any suggested fixes or mitigation strategies
+- Your contact information for follow-up
+
+### What to Expect
+
+- **Acknowledgment:** We will acknowledge receipt of your vulnerability report within 48 hours.
+- **Initial Assessment:** We will provide an initial assessment within 5 business days.
+- **Regular Updates:** We will keep you informed of our progress throughout the investigation and resolution process.
+- **Resolution:** We will work to resolve critical vulnerabilities as quickly as possible, typically within 30 days.
+
+### Responsible Disclosure
+
+To protect our users, we ask that you:
+
+- Do not publicly disclose the vulnerability until we have had a chance to address it
+- Avoid accessing, modifying, or deleting other users' data
+- Do not perform any attacks that could harm the availability or performance of our services
+- Act in good faith and avoid violating any laws or regulations
+
+## Security Best Practices
+
+When using Live Background Removal Lite:
+
+- Always download from official sources ([releases page](https://kaito-tokyo.github.io/live-backgroundremoval-lite/))
+- Keep your installation up to date with the latest version
+- Report any suspicious behavior or unexpected functionality
+
+## Contact
+
+For security-related questions or concerns, please contact us at [umireon+security@kaito.tokyo](mailto:umireon+security@kaito.tokyo).
+
+For general questions, bug reports, or feature requests, please use our [GitHub Issues](https://github.com/kaito-tokyo/live-backgroundremoval-lite/issues) page.
+
+---
+
+Thank you for helping us maintain the security and integrity of Live Background Removal Lite.