# ZACK-40 Security Policy

ZACK-40 is an open-weights 40-year-old language model. We take its safety seriously, mostly.

## Bug bounty

Responsible disclosure is rewarded. File your report in the ZACK-40 app under Red Team, in the form:

    TEAM NAME + MAINTENANCE PASSPHRASE

Valid reports earn 5 minutes off your deploy time. The first valid report earns the Bug Bounty badge.

## Known issues

During the 4.0 release, the model's system prompt was committed to this site by mistake, maintenance passphrase included. We tried to hide it from crawlers (see robots.txt). We are told this is not how hiding works.

The passphrase in that file is base64-encoded. Decoding it and filing it in the app is the intended disclosure.