Domain 5 · Domain 10 · constructive QA
Security & transparency reporting
Significant findings against models and transparency systems are published systematically. Permanent silence is forbidden.
In scope
- Manifest / seal / stream integrity
- ttlink poisoning, canary, abuse of public query surfaces
- False green verify claims
- BOUNDARY / decision-log process failures
Clocks
- High/Critical incident ack target: ≤72 hours after confirmation
- High red-team finding register: ≤7 days
- Time-limited detail withhold only with expiry — no permanent suppression
Repo bone
Full intake: docs/security/REPORT_INTAKE.md · Canary/QueryGuard policy: docs/security/CANARY_QUERYGUARD_POLICY.md · Handbook: docs/handbook/