docs(security): document private vulnerability reporting - #86

Merged

sunny-wego merged 5 commits into

mainfrom

docs/security-threat-model

Sep 22, 2026

Commits on Sep 22, 2026

docs(security): document PVR and write down the threat model

sunny-wego
and
claude
committed
85e1e76
docs(security): scope the edge trigger and the PVR notification claims

sunny-wego
and
claude
committed
14fac5a
docs(security): record both scope decisions, and restore the audit wording

sunny-wego
and
claude
committed
b4f3a79
docs(security): keep the policy to what a reporter needs

sunny-wego
and
claude
committed
43d0105
docs(security): drop the attacker distinction, and invite every report

sunny-wego
and
claude
committed
a768221