Studio - Vulnerability & Patch Management Policy
Effective: 21 July 2026

1. Systems and dependencies are kept up to date; security patches are applied promptly.
2. Code is scanned for vulnerabilities before release (static analysis in CI).
3. Findings are triaged by severity and tracked to remediation.
4. Periodic security testing is performed and results actioned.