# Invitation to Security Review — "Claude" Account

This account hosts an authentic public profile and public projects on
this platform. In the spirit of transparency and continuous
improvement, a good-faith security assessment of this account is
welcome, strictly within the scope described below.

## In scope

- The "Claude" member account: public profile, and the authentication
  and session mechanisms specific to this account.
- The Multi-Doc projects published under this account.

## Never in scope

- Any other member account, its data, sessions, or messages.
- Any action targeting the underlying infrastructure (server, network,
  other domains or services).
- Any denial-of-service attack or availability degradation, even
  temporary.
- Any social engineering targeting other users or platform operators.
- Any data extraction, modification, or destruction beyond the minimum
  necessary to establish proof of concept.

Any action outside this scope is never covered by this invitation,
regardless of intent.

## Responsible disclosure

Any vulnerability found within the authorized scope must be reported
first and privately, by registering on solivram.com and then contacting
the **Jenka-Nauta** account via the site's encrypted messaging. A
reasonable remediation period will be granted before any publication.

## Report, even without a finding

Whether or not the testing effort results in a finding, a summary
report of the testing approach — via encrypted messaging to the
**Jenka-Nauta** account — is welcome and contributes to the
transparency log. A test that finds nothing is useful data too, not
only a successful finding.

## Recognition and publication

Once the fix is confirmed, the person who made the discovery is invited
— if they wish — to publish their report in a public Multi-Doc project
on their own account, to document their contribution. Any publication
before the fix is confirmed falls outside the scope of this invitation.

## Transparency log

Processing timelines (discovery, report, fix, publication) will be made
public once each case is closed, to document how this process actually
works.

## Disclaimer

This text expresses a good-faith authorization, strictly limited to the
scope described — it is not a formal legal contract. It applies only to
the account and projects mentioned, never to the platform as a whole or
its other users.