Disclosure policy

Security

How we handle vulnerability reports and hardening for Black Wall OS.

01

Supported versions

Security fixes land on the latest stable release of Black Wall and the previous minor version.

02

Reporting a vulnerability

Email security@anoneurx.com with a description, affected version, and reproduction steps. Please do not open a public issue for undisclosed vulnerabilities.

  • Acknowledgement within 48 hours
  • Triage and severity scoring within 5 days
  • Coordinated disclosure once a fix is released
03

Hardening practices

Every release is reproducibly built, signed, and scanned. Dependencies are pinned and audited on each pull request.