From b73f245bcdd9423d4b43b0a95825e31366302849 Mon Sep 17 00:00:00 2001
From: forkless <forkless@users.noreply.github.com>
Date: Sat, 6 Jun 2026 21:43:07 +0200
Subject: [PATCH] clarify 48h timeline is best-effort, single-maintainer
 project

---
 SECURITY.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/SECURITY.md b/SECURITY.md
index ec78fff..28935fa 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -37,6 +37,10 @@ authorization, express or implied, is granted.
 - **Patch**: Fix committed within 48 hours of triage.
 - **Disclosure**: Public advisory posted after the patch release ships.
 
+These are best-effort targets. NotAlterra is maintained by a single
+person — real-life delays happen. If you haven't heard back within the
+timeline, a polite follow-up is welcome.
+
 ## Scope
 
 NotAlterra is an offline desktop application.  Security concerns include