> For the complete documentation index, see [llms.txt](https://docs.rome.builders/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.rome.builders/zh/an-quan/responsible-disclosure.md).

# 负责任披露

如何负责任地报告 Rome Protocol 的安全漏洞——联系渠道、应包含的内容以及披露指南。

如果您在 Rome Protocol 中发现安全漏洞，请负责任地报告。

## 报告

电子邮件 <rome@romeprotocol.com>，或在以下位置提交工单 [Rome Discord](https://discord.gg/vZ9rnCdNSB) 以私下联系核心团队。

**应包含内容：**

* 漏洞描述
* 复现步骤
* 潜在影响评估
* 用于后续跟进的联系方式

## 指南

* 应当 **而不是** 在修复部署前公开披露该漏洞
* 应当 **而不是** 将该漏洞用于超出展示所需范围的利用
* 应当 **而不是** 访问或修改属于其他用户的数据
* 请给予团队合理时间进行调查并修复问题

## 范围

包含范围：

* Rome EVM 链上程序
* Rome Proxy 和 Hercules 服务
* Rome Solidity SDK 和合约库
* Oracle Gateway 适配器
* 跨链桥合约（ERC20SPL、Factory）

不在范围内：

* 第三方依赖项（请向其维护者报告）
* 社会工程攻击
* 针对测试网/开发网基础设施的拒绝服务攻击
* 已弃用或已归档仓库中的问题

## 社区

* [Discord](https://discord.gg/vZ9rnCdNSB) — 一般问题与支持
* [Telegram](https://t.me/+tdnr-M6kcngxYzhk) — 社区更新
* [GitHub](https://github.com/rome-protocol) — 代码和问题跟踪


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.rome.builders/zh/an-quan/responsible-disclosure.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.