Do not publish confidential organizational assessment evidence, credentials, personal data, system details, or exploitable vulnerabilities in public issues.

For future security reporting, the project will publish a private reporting channel on eaims.org.

EAIMS documents are guidance. Implementers remain responsible for securing their systems and assessment data.