[ 01 ] — Legal
Platform Disclosure Policy
How vulnerabilities reported through the platform are handled and disclosed.
01 · Scope
Applies to all programs unless a program states otherwise.
02 · Timelines
Program owners aim to resolve criticals within 30 days.
03 · Disclosure
Mutual agreement, or default disclosure after resolution.
04 · Exceptions
Extensions granted for complex fixes with notice to the reporter.
[ ∞ ] — Next step
