What is Responsible disclosure of AI-found bugs? Definition and why it matters
==============================================================================

The same coordinated-disclosure rules as human findings, plus a duty to send only validated, reproducible reports so maintainers are not flooded.

Detail: The curl bounty shutdown is the consequence of ignoring the second half. zkSecurity's CIRCL and Bron Labs disclosures, with minimised proofs of concept and bounty coordination, are the model.

Source page: https://agentsast.com/glossary/responsible-disclosure-ai/
Compiled by: agentsast editors (https://agentsast.com/about/)
Last reviewed: 2026-09-13