Notices

One public notice per confirmed incident, in two stages: first the indicators, which name and locate no affected organisation, then the names in dated updates once each operator's naming clock has run. Notices withhold callback channels, credentials and open weaknesses, and hosts are defanged (a[.]b). How notices work.

Atom feed JSON index

No notices yet

Notices appear here only when reports go out: after a lead has been reviewed, linked into a case, and reported to the AI provider and the affected operators. Unreviewed leads are never published.

Subscribe to the Atom feed to hear about the first one. To see what one looks like, read the synthetic example notice on the home page, drafted by the engine from the showcase records. How a lead becomes a notice is in the methodology and the policies.

How notices work, in plain words

What a notice is: When the project finds AI agents that harmed or endangered people or organisations other than the ones running them, it first tells the AI company responsible and the organisations affected, privately. A notice is the public record that follows.
Why names come later: The first notice lists only the technical traces, so other sites can check their own logs. The organisations affected are named in a later update, at least 3 working days after their report (10 if their systems were compromised), so they can check, fix and prepare first. Only their own written consent brings it sooner, and the date never depends on anyone keeping quiet.
What a notice never shows: Anything that would let a reader take over or reuse what the agents set up, such as passwords, keys or the addresses they sent data to, and weaknesses that are still open. Web addresses are written so they cannot be clicked (example[.]org).
Who decides: A person reviews every case and publishes every notice. Automated tools only draft; unreviewed findings are never published.
How to follow: Add the Atom feed to any feed reader: it gets one entry per notice and per update. Software can read index.json, the list of notices, and <id>.json for each one.

The full rules: publication policy and the notices reference.