Disclosure Recognition
Researchers and disclosing parties.
The firm thanks the parties listed below for the responsible disclosure of issues affecting our published surface. Acknowledgments are issued at the disclosing party's preferred level of attribution; where a party prefers to be named, they are named, and where a party prefers initials, a reference number, or no listing at all, that preference is honoured.
M. Weir
Identification of an inconsistency between a working-paper figure and the corresponding caption (see errata ). Reported with attendance log excerpt; reconciliation completed in the same cycle.
A. Raz (acknowledged posthumously)
Submission concerning attribution on a 2025 conference paper. The submission was lodged with the firm prior to the disclosing party's passing and was honoured in full at the next publication cycle (see errata ). The firm will not list correspondence addresses for posthumously acknowledged parties.
Anonymous (via proxy)
Identification of a paragraph in the Q3 2025 Quarterly Briefing announcing a session that did not take place on the announced date. The submitting party was named in the affected paragraph and elected to disclose via standing counsel. Paragraph withdrawn pre-distribution (see errata ).
J. Halberd
Report concerning the firm's biographical copy listing the Head of Product as filled. The disclosing party held a copy of an earlier deck in which the role had also been listed as filled and observed that the listed individual had not, on either occasion, been present at any briefing referencing the role.
Reference
Report submitted under the firm's reference-number-only convention. The disclosing party identified an unannotated draft of a working paper accessible via a directory listing on a content delivery endpoint no longer operated by the firm. The endpoint was decommissioned within one working day of receipt; the draft was not distributed.
D. Ulm
Identification of a hyperlink on the firm's Compliance Statement referencing an internal form ("Form XT-7") whose target was not intended for public navigation at the time of observation. The target's public posture has since been clarified; the link is retained on the basis that the form's existence is not, of itself, non-public.
[Withheld by request]
A submission carrying this date of issue was received by the firm in 2024 and is acknowledged here for completeness of the record. The submitting party has asked that no further detail be listed. The substance of the submission has been incorporated into the firm's standing definitions and is reflected in current materials.
For first-time disclosing parties
How to be listed.
Submit your report to [email protected] with your preferred attribution: full name, initials, reference number, or no listing. The firm acknowledges receipt and confirms attribution before publication. Where a submission would, on publication, identify a previously unlisted participant, the attribution is held in the firm's record and not posted here.
The acknowledgments page is the firm's only public listing of researchers. The firm does not maintain an external bug-bounty platform and does not pay disclosure bounties. Recognition is the compensation offered.