We want the responsible-disclosure flow to be safe and fair for everyone involved — the researcher and the affected party. Reporting a vulnerability nobody asked for is the flow that needs the most time and care, and we would rather take that time than get it wrong.
Until it is ready, no case can be filed, advanced or published here.
This is the stage where we take suggestions on the logic and the flow of responsible disclosure. If you have thoughts, they are welcome.
