Tell me when the Attestation Pack ships
It is not built yet. This records that you want it — which is also how I decide what to build first.
What you are asking for
- Attestation and roadmap letter stating what you comply with and when
- Coordinated vulnerability disclosure policy
- Support-period statement
- SBOM in CycloneDX, plus a summary PDF
- Security contact card and a security.txt file
- Cover sheet with a hash of every document
- Regeneration for 12 months as your product changes