Require disclosure of LLM usage in security reports

Added requirement to disclose the use of LLMs in security reports.
2026-05-20 22:12:33 -04:00 · 2026-02-05 06:12:26 -07:00
parent e0f8d9b204
commit 40927d2f75
1 changed files with 2 additions and 0 deletions
@@ -33,6 +33,8 @@ We get a lot of difficult reports that turn out to be invalid. Clear, obvious re

 First please ensure your report falls within the accepted scope of security bugs (above).

+**YOU MUST DISCLOSE THE USE OF LLMs ("AI"), WHETHER FOR DISCOVERING SECURITY BUGS OR WRITING THE REPORT.** Even if you are using AI as part of writing the report or its replies, we require you to mention the extent of it.
+
 We'll need enough information to verify the bug and make a patch. To speed things up, please include:

 - Most minimal possible config (without redactions!)