Studies / LH038

When was CVE-2026-98432 reported, fixed, numbered, shipped and described, and how do those dates sit beside the disclosure policies each party states?

In short. When an AI model finds a serious flaw, how do the dates of its public life line up with the disclosure rules the parties say they follow? For the same kernel flaw, we'll build a dated timeline from public sources (report, fix, CVE, distribution advisories, Anthropic's post) and set it beside six published disclosure policies. One read from 17 November; the record by 30 November.

No write-up yet studies/LH038/brief.md

From studies/LH038/ in the repository, last changed 8 November 2026.