From 826269a61857d85df9e6b74bdbbfa09eaed7875e Mon Sep 17 00:00:00 2001
From: Mahdi Shafiei <m.mahdi.shafiei@gmail.com>
Date: Thu, 27 Aug 2026 13:45:16 -0700
Subject: [PATCH] Add a security policyand three issue templates

Staged as patches/DiffBio/2026-08-27-005-community-files in avitai-portfolio.
Applied against 1ea84a3e4bd5.
---
 .github/ISSUE_TEMPLATE/bug_report.yml      | 48 ++++++++++++++++++++++
 .github/ISSUE_TEMPLATE/config.yml          |  1 +
 .github/ISSUE_TEMPLATE/feature_request.yml | 33 +++++++++++++++
 SECURITY.md                                | 25 +++++++++++
 4 files changed, 107 insertions(+)
 create mode 100644 .github/ISSUE_TEMPLATE/bug_report.yml
 create mode 100644 .github/ISSUE_TEMPLATE/config.yml
 create mode 100644 .github/ISSUE_TEMPLATE/feature_request.yml
 create mode 100644 SECURITY.md

diff --git a/.github/ISSUE_TEMPLATE/bug_report.yml b/.github/ISSUE_TEMPLATE/bug_report.yml
new file mode 100644
index 0000000..85489e4
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/bug_report.yml
@@ -0,0 +1,48 @@
+name: Bug report
+description: Report a reproducible DiffBio bug
+title: "[Bug]: "
+labels: ["bug"]
+body:
+  - type: textarea
+    id: summary
+    attributes:
+      label: Summary
+      description: What went wrong?
+    validations:
+      required: true
+  - type: textarea
+    id: reproduce
+    attributes:
+      label: Minimal reproduction
+      description: Include code, commands, and any input data shape assumptions.
+      render: python
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+    validations:
+      required: true
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual behavior
+      render: text
+    validations:
+      required: true
+  - type: input
+    id: diffbio-version
+    attributes:
+      label: DiffBio version or commit
+      placeholder: "0.1.0 or git SHA"
+    validations:
+      required: true
+  - type: textarea
+    id: environment
+    attributes:
+      label: Environment
+      description: Include OS, Python, JAX, jaxlib, accelerator, and installed extras.
+      render: text
+    validations:
+      required: true
diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml
new file mode 100644
index 0000000..0086358
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/config.yml
@@ -0,0 +1 @@
+blank_issues_enabled: true
diff --git a/.github/ISSUE_TEMPLATE/feature_request.yml b/.github/ISSUE_TEMPLATE/feature_request.yml
new file mode 100644
index 0000000..a5698b2
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/feature_request.yml
@@ -0,0 +1,33 @@
+name: Feature request
+description: Propose a new DiffBio capability
+title: "[Feature]: "
+labels: ["enhancement"]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What user need or workflow gap should this solve?
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed API or behavior
+      description: Include example code or CLI usage if possible.
+      render: python
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+    validations:
+      required: false
+  - type: textarea
+    id: validation
+    attributes:
+      label: Validation plan
+      description: What tests, docs, or examples would prove this works?
+    validations:
+      required: false
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..a373624
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,25 @@
+# Security Policy
+
+## Supported Versions
+
+DiffBio is a research preview. Security fixes target the latest released version
+and the current `main` branch.
+
+## Reporting a Vulnerability
+
+Please report suspected vulnerabilities privately by emailing
+security@avitai.bio.
+
+Include:
+
+- Affected DiffBio version or commit.
+- Environment details, including Python, JAX, and operating system versions.
+- A minimal reproduction or proof of impact.
+- Any known mitigations.
+
+We will acknowledge reports as soon as practical, investigate privately, and
+coordinate disclosure once a fix or mitigation is available.
+
+## Scope
+
+Security-sensitive areas include sequence, variant and molecular file parsing, dataset and reference-genome loading, checkpoint loading, file-system storage, CI release automation, and any code path that processes untrusted biological input data.