If you believe you have found a security vulnerability affecting firmware built from this repository (RT1170 Active ESL, RT118x CM33, or related Zephyr/Mender images), please report it responsibly.

Contact (placeholder): security@dynamicdevices.co.uk — replace with the product-line published contact before fleet shipment (CRA Annex I Part II / UK PSTI).

Engineering triage:

• Active ESL / RT1170: docs/CRA-COMPLIANCE.md
• RT118x programme: PROJECT-NOTES (WS3) and GitHub issue #7

Do not open a public GitHub issue for undisclosed exploit details. Use the contact above or a private advisory channel once your product policy is defined.

Upstream components:

• Zephyr vulnerability reporting
• Mender security