Secure intake
Use a designated channel for sensitive reports.
Coordinated disclosure
Report security findings through a controlled process.
Give researchers and customers a clear path to submit, scope, validate, and remediate potential security issues.
Purpose-built capabilities
What Coordinated disclosure covers.
Triage
Establish severity, affected surfaces, and reproducibility.
Coordination
Protect customers while remediation is developed.
Resolution evidence
Document fixes, validation, and communication decisions.
Follow Coordinated disclosure from identity to evidence.
Each consequential action moves through the same six control points. See where 2AYE evaluates authority, requests human review, and preserves the outcome.
- 01IdentityWho or what is acting
- 02IntentSigned purpose and limits
- 03PolicyDeterministic evaluation
- 04ApprovalA named human when required
- 05ExecutionSingle-use grant, redeemed at the resource
- 06EvidenceReceipt joined to the audit chain