Legal draft
Responsible disclosure policy.
A complete vulnerability-disclosure policy requires verified reporting and response channels.
Draft 0.2 for founder and qualified legal review. No effective date has been set. This page is not an operative agreement or a claim of attorney approval.
Good-faith work
Reports should avoid accessing others’ data, service disruption, or sensitive-data exposure. This draft grants no authorization for invasive testing.
Submission
A monitored security intake route and exact scope will be published once verified.