Security
Clear controls. Clear boundaries.
MerkEQ documents what a product verifies, what it stores, and what it cannot prove.
Responsible disclosure
A dedicated vulnerability-reporting channel has not yet been configured. Please do not rely on an invented email address. This is a Product Owner configuration requirement before a public disclosure channel is published.
Supported versions
Supported releases receive security fixes according to their product policy. Critical security fixes are not made conditional on entitlement.
Product security documentation
Security boundary
Security controls reduce a defined risk; they do not create evidence beyond the product’s documented scope. For example, Relay can record its own transport outcome but cannot prove downstream business processing.