Expected practice
Explain the failure condition and its evidentiary consequences using authorized tests and minimized examples. Prefer reproducible defensive evaluation over recipes for concealing a particular act. Avoid exposing private keys, credentials, exploitable personal records, or harmful real-person media.
Responsibility and boundaries
Where an unresolved vulnerability affects a deployed system, use an appropriate private disclosure route and record the publication decision. The security policy provides this project’s contact channel; it is not permission to test third-party systems.
Application and current status
Document scope restrictions and withheld details so readers understand replication limits. A publication can be delayed, narrowed, or declined when its remaining risk exceeds its research value. Do not infer malicious intent solely from ordinary transformations or missing records.
Canonical reference: https://syntheticforensics.org/policies/dual-use/
Report a technical correction