Skip to content

Security: lfglabs-dev/verity

Security

SECURITY.md

Reporting security issues

Please report suspected Verity security, soundness or confidentiality issues privately to ben@lfglabs.dev. Include a concise description, affected version or commit, expected impact and non-sensitive supporting information. Do not publish credentials, private client code or exploit details in a public issue. Do not access another party's data or disrupt a service while investigating.

Benjamin Flores receives and routes technical reports to Thomas Marchand for assessment. Reports are treated confidentially and shared only with people needed for assessment and resolution. Anonymous reporting, a bounty, legal safe harbor and a response-time SLA are not promised.

Formal-verification results apply to the agreed models, specifications and explicit assumptions. Identify that context when reporting a suspected verification issue. Use the agreed confidential client channel for private engagement information.

There aren't any published security advisories