§ Findings ledger
Ledger
Every engagement we run produces a ledger entry per finding, from discovery through remediation. Status is auditable, evidence is attached, closure is verified. We carry the work to fixed, then sign the entry off.
- 0 Total disclosures
- 0 Critical
- 0 High
- 0 Active days (last 12mo)
§ 01 Lifecycle
Finding states
- 01
Discovered
Surface identified, evidence captured, severity classified.
- 02
Reported
Coordinated disclosure delivered to the appropriate channel.
- 03
Acknowledged
Recipient confirmed receipt and ownership.
- 04
Remediated
Fix verified independently; surface re-tested clean.
- 05
Signed off
Ledger entry closed and archived to the engagement record.
§ 02 Activity
Trailing 12 months
Public-facing disclosure cadence by month, stacked by severity. Aggregate counts only. Per-engagement detail is held inside the engagement boundary. Updates with every coordinated disclosure shipped.
Source: NuClide public coordinated-disclosure record. Live count: 133 disclosures, 64 CRITICAL · 35 HIGH.
§ 03 Cadence
Day-by-day
Same disclosure record, day-level resolution. Each cell is one day. Filled accent = day had a disclosure shipped; deeper accent = 3+. Research programs run in burst weeks, not months.
§ 04 Guarantee
Included
- Every finding tracked from discovery through closure. No orphans.
- Evidence preserved per finding. Replayable, defensible, auditable.
- Retest after remediation. No signed-off entry without verified fix.
- Per-engagement ledger handed over at closure. Your record, your control.
Per-engagement detail held privately. Reference engagements available to coordinated parties on request.