Thank you, that means a lot. Transparency has been part of how we work from the start. We'd rather publish the details and tell people exactly what to update than quietly patch and hope nobody notices. Audits are only worth something if what they find gets out.