This is a public-safe responsible-disclosure lane. It records our rules and links to sanitized disclosure records and non-actionable commitment notes. The current default is commitment first: when retained evidence exists, a non-actionable public commitment record gives the work a visible timestamp while technical details stay private. It does not publish exploit steps, private emails, source paths, reproduction code, raw logs, or unresolved… See the full description on the dataset page:
https://huggingface.co/datasets/cjc0013/responsible-disclosure-evidence-index.
