// security / changelog

Security Policy — Changelog

Every revision of the responsible-disclosure policy, oldest at the bottom. The current effective version is at /security.

1. v1.1

   2026-05-06

   10-section company-brand rewrite. New: explicit safe-harbour language, expanded out-of-scope list (12 items), testing rules including SpidyOps-Research/1.0 user-agent guidance, SLA commitments (72h ack / 14d triage / 90d coordinated disclosure), recognition mechanism via /security/hall-of-fame, versioning + changelog link.

2. v1.0

   2026-04-15

   Initial responsible-disclosure policy. Scope, in/out-of-scope, process, PGP fingerprint, hall-of-fame credit on /about.