Skip to content

Repository navigation

Security: Indus-Stack/.github

Security

SECURITY.md

Security & Auditability Policy

Sovereign Auditability & Zero Telemetry Guarantee

Indus-Stack builds foundational infrastructure for sovereign industrial bases. Trust requires transparency:

  1. Zero Telemetry: All repositories maintained under Indus-Stack are strictly guaranteed to contain no telemetry, phone-home mechanisms, analytics collectors, or cloud phoning.
  2. Reproducible & Inspectable: Codebases are auditable by independent third parties, national evaluation centers, and air-gapped system integrators.
  3. Supply Chain Integrity: Dependencies are strictly pinned and minimized to prevent supply-chain attacks.

Reporting a Vulnerability

If you discover a security vulnerability in any Indus-Stack project:

  • Please report it via email to measure@i-dacs.com (Subject: [SECURITY] Indus-Stack Vulnerability Report).
  • Please do not disclose vulnerabilities publicly via GitHub issues until a security patch and CVE assessment (if applicable) have been coordinated.
  • We acknowledge security reports promptly and collaborate with reporters on patches.

There aren't any published security advisories