Skip to content

Security: AETHERXGLOBAL/aether-x-governed-intelligence

Security

SECURITY.md

Security Policy

Repository: AETHER X Governed Intelligence public technology showcase
Organization: AETHER X GLOBAL


Scope

This repository is a public, non-production technology showcase. It does not contain the proprietary Governed Intelligence engineering core, production credentials, customer systems or production deployment infrastructure.

Security reports are still welcome where they concern this repository, its public automation, published artifacts, links or disclosure process.


Do Not Publish Sensitive Details

Do not place exploit details, credentials, private data, confidential AETHER X information or step-by-step vulnerability details in a public issue, discussion or pull request.

If GitHub Private Vulnerability Reporting is available for this repository, use that private channel.

If a private reporting channel is not available, open a public issue containing no vulnerability details and title it:

Private Security Contact Request

AETHER X can then establish an appropriate private communication path.


Useful Report Information

Once a private channel is established, a useful report may include:

  • affected repository or artifact;
  • affected commit, version or URL;
  • concise impact description;
  • reproduction conditions;
  • proof of concept where appropriate and safe;
  • whether information has been disclosed elsewhere;
  • reporter contact details.

Do not include real customer information, third-party credentials or unnecessary sensitive data.


Responsible Testing Boundary

Do not perform testing that:

  • targets unrelated AETHER X private systems;
  • attempts unauthorized access to private repositories or accounts;
  • accesses or modifies third-party data;
  • causes denial of service or destructive behavior;
  • uses social engineering against AETHER X personnel or third parties;
  • exceeds authorization provided in a separate written evaluation agreement.

This policy does not create authorization to test systems outside this public repository.


Disclosure

Please allow a reasonable opportunity for private investigation and remediation before public disclosure.

No bug bounty, response SLA, safe-harbor commitment or compensation program is created by this file unless AETHER X publishes separate written terms establishing one.


Proprietary Core

The private Governed Intelligence engineering core is not part of this repository's public security scope. Access to private technical systems or evaluation environments is governed separately.

There aren't any published security advisories