Security

Reporting a flaw in the protocol

If you find a weakness in the Jailed Canary Protocol itself (a way to game verdicts, leak labels to the Warden, forge bookings, or break out of a cell undetected), report it privately to the maintainer, Nebulonium, Inc., before public disclosure. Open a GitHub security advisory on this repository or contact the maintainer directly.

Canary content

This repository never contains working exploit code, live malware, real credentials, or undisclosed vulnerability details. JCP bad canaries are inert bait by design (SPEC Section 4.1).

Do not submit exploit code, live attack payloads, or undisclosed vulnerability details in issues or pull requests.