SECURITY / DISCLOSURE
Security reports need a protected path.
Disclosure protocol
No vulnerability-report destination or response SLA is claimed yet. This page records the minimum disclosure contract required before public launch.
01 / CURRENT SCOPE
Public preview surfaces only.
The current site has no account, credential, exchange-connection, custody or order-execution flow. Do not test third-party infrastructure or attempt to access data that is not yours.
02 / REPORT CONTENT
Make a future report reproducible.
A report should identify the affected route, impact, reproduction steps and safe evidence. Credentials, private keys and personal data should never be included.
03 / SAFE HARBOR DEPENDENCY
Policy and contact require approval.
A production route must publish an authorized testing policy, monitored destination, acknowledgement target, escalation path and remediation communication process.