// coordinated disclosure
Show us the break clearly.
Draft for counsel review · 4 September 2026
Report
Email security@causerie.sh with affected URLs, reproduction steps, impact, and a safe proof of concept. Do not include live credentials or another user’s content.
Safe research
Good-faith research against accounts and data you control is welcome. Avoid privacy violations, persistence, denial of service, social engineering, and automated scanning that degrades the service. Stop after proving impact.
Our response
We aim to acknowledge a complete report within three business days, keep you informed, fix before publicity, and coordinate disclosure within 90 days. A critical issue may need a shorter private remediation window; a complex ecosystem issue may need a mutually agreed extension.