Responsible disclosure

TODO: this page has no copy yet.