Policy and Disclosure: 2025 Edition

Google Project Zero announces a trial "Reporting Transparency" step added to its existing 90+30 disclosure policy to reduce the upstream patch gap—the delay between an upstream fix and downstream integration—by publicly noting, within about a week of reporting, the vendor/project, affected product, and disclosure timeline without technical details; the goal is to spur faster coordination and patch adoption across ecosystems, with Google Big Sleep also participating.