Security

Reporting a flaw in the protocol

If you find a weakness in the Umpire Assay Protocol itself (a way to manufacture agreement or divergence, hide an affiliation, shop for a Check Assay or umpire, or compute a Reproof Status that a verifier would not), report it privately to the maintainer, Craig Thomas Ellrod, before public disclosure. Open a GitHub security advisory on this repository or contact the maintainer directly.

Payloads

A Check Assay or Umpire Assay may include embargoed canaries under PP-SPEC-077 Section 7. This repository never contains canary contents, embargoed details, or exploit code. Do not submit them in issues or pull requests.