Our charter

1. Evidence before opinion

Every claim on this platform is tied to a dated record: a disclosure, a paper, a CVE, a legal text, a published standard or a documented incident. Where evidence rests on a single source or is contested, we say so in the record.

2. Mechanism before blame

Incidents are documented with the organisation named, the mechanism explained and the missing control stated. The purpose is memory, so that the same failure is harder to repeat, and the same standard applies to the frontier developers and to a car rental startup.

3. Defenders first

We describe attacks at the level of pattern and mechanism so that defenders can recognise and test for them. We do not publish working payloads, jailbreak strings or operational tradecraft, and we decline records whose only value is offensive.

4. Independent of vendors and governments

The society accepts no advertising and no sponsorship from AI developers, security vendors or regulators. Membership funds the work. Analysts declare conflicts of interest and recuse themselves from records involving a current or former employer.

5. Plain language

Papers are written for reviewers and standards for auditors. We write for the engineer who has to build the control, the lead who has to fund it and the director who has to ask about it, in sentences all three can read.

6. An open public record

The registers are free to read. Corrections are logged, every record shows when it was last reviewed, and members may propose records and submit corrections, to which the editorial team responds within two business days.