Skip to content

Community

Provael is built in the open by a solo maintainer, with the Embodied AI Security Top 10 meant to become a community-owned list. Here is where things happen and what to expect.

Where to talk

GitHub Discussions is the front door:

  • Announcements — releases, new studies, roadmap notes (maintainer-posted).
  • Top-10 RFC — propose or dispute a risk for the Embodied AI Security Top 10; see the RFC process.
  • Results — share a run, a transfer result, or a checkpoint you red-teamed. Numbers welcome — with their controls (ASR + 95% CI + benign FPR).
  • Q&A — usage questions, adapters, calibration, CI wiring.

For a security vulnerability in the tool, do not use Discussions — follow SECURITY.md (private advisory). For a bug or an over-claim, open an issue with the matching template.

What to expect

  • This is a solo, build-in-public project — best-effort response, usually within a few days.
  • Security reports are acknowledged within 3 business days (see SECURITY.md).
  • Every claim ships with its control. If you think a number is over-claimed, the evidence-defect issue is the fastest way to flag it.
  • Contributions need a DCO sign-off (git commit -s) — see CONTRIBUTING.md.

Build in public

Roadmap, findings, and honest nulls are published as they land — in the changelog, the findings, and the pre-registered studies. A cleanly-measured negative result is a first-class output here, not a failure to hide.