Jarek Potiuk
9d5e5a7f26
* Add threat model + security-model discoverability (AGENTS.md → SECURITY.md → THREAT_MODEL.md) Generated-by: Claude Code * THREAT_MODEL.md: renumber out-of-scope threats list to start at 1 Per review (chenBright) — the "Threats explicitly out of scope" list was continuing the previous list's numbering (8-15); restart at 1-8. Generated-by: Claude Code
533 B
533 B
Security Policy
Reporting a Vulnerability
apache/brpc follows the Apache Software Foundation security process. Please report suspected
vulnerabilities privately to security@apache.org; do not open public
GitHub issues or pull requests for security reports.
Threat Model
What the project treats as in scope and out of scope, the security properties it provides and disclaims, the adversary model, and how findings are triaged are documented in THREAT_MODEL.md.