Skip to content

Security and responsible disclosure

This repository contains governance and policy drafts for a prospective 501©(6) trade association. It is not a software product, but it does host materials whose integrity matters (draft bylaws, policies, sponsor agreements, formation documents).

Reporting a concern

If you discover any of the following, please report it privately rather than opening a public Issue:

  • Personally identifying information (PII) committed to the repo by mistake
  • Credentials, API keys, or other secrets committed by mistake
  • A document that misrepresents law, IRS guidance, or a state filing requirement in a way that could mislead readers
  • Suspected impersonation or unauthorized changes to the repository
  • Any other material concern about the integrity of the proposal

How to report: Email the repository administrator at the contact listed on the Ganjier Guild website (or via GitHub at @ginalyncox). Use a subject line beginning with [Guild repo].

We will acknowledge reports within a few business days and remediate (e.g., rewrite history to remove leaked secrets, correct a misstatement, or revoke access) as quickly as the issue warrants.

Scope

This policy covers the contents of this GitHub repository only. It does not cover the Guild's production websites, member systems, or payment infrastructure, which are governed separately and will have their own security policies once the Guild is formed.

Nothing in this repository \u2014 including this file \u2014 is legal, tax, or accounting advice.