CoreBlow Trust

CoreBlow trust and safety resources.

Overview

CoreBlow Trust is part of the CoreBlow public repository family. Trust, security, and safety policy surface for CoreBlow.

This repository follows the same ecosystem split that CoreBlow uses to keep release surfaces small, auditable, and independently governed.

Repository Role

• Phase: 6
• Priority: governance
• Kind: policy
• Family: CoreBlow public repository family
• Branding: CoreBlow

Scope

• Threat categories.
• Security response expectations.
• Policy review workflows.

Out of Scope

• Runtime security implementation.
• Private incident data.

Key Files

• .gitignore
• package.json
• scripts/check-trust.mjs
• security-response.md
• threats.json
• .github/CODEOWNERS
• .github/dependabot.yml
• .github/ISSUE_TEMPLATE/bug_report.yml

Development

Test

npm test

Release Policy

Do not publish packages, tags, installers, or release artifacts from this repository without explicit CoreBlow release approval.

Version changes must follow the coordinated CoreBlow release plan.

Links

• CoreBlow
• Documentation
• Website
• Security Policy
• Contributing