Disclosure policy
Security
How we handle vulnerability reports and hardening for Black Wall OS.
01
Supported versions
Security fixes land on the latest stable release of Black Wall and the previous minor version.
02
Reporting a vulnerability
Email security@anoneurx.com with a description, affected version, and reproduction steps. Please do not open a public issue for undisclosed vulnerabilities.
- Acknowledgement within 48 hours
- Triage and severity scoring within 5 days
- Coordinated disclosure once a fix is released
03
Hardening practices
Every release is reproducibly built, signed, and scanned. Dependencies are pinned and audited on each pull request.
