All notable changes to the 3 Leaps OSS Policies repository will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning for policy updates.

• SECURITY.md: encrypt reports to the committed public cert (UID infosec@3leaps.net); SMTP remains security@3leaps.net.
• keys/3leaps-oss-security-public.asc: replacement public certificate.

• SENSITIVE-LOCAL-DATA.md: Canonical policy for keeping proprietary/user data out of OSS repositories — sensitive material lives outside the repository tree (.gitignore is a convenience filter, not a security boundary); reference external files by location; .env holds secrets by reference. Repos conform by declaring conformance and recording the rule as a principle in their ADRs/role prompts.
• TRADEMARK-POLICY.md: Project-name guidance for sysprims, docprims, sfetch, and seclusor.

• README.md: Corrected the Code of Conduct link target to CODE-OF-CONDUCT.md (matched the actual filename).

Initial stable release of the oss-policies repository.

• README.md: Repo overview, purpose, key documents, and sync process.
• TRADEMARK-POLICY.md: Guidelines for using 3 Leaps trademarks, including Fulmen, MDMeld, and Docemist marks/logos.
• CONTRIBUTING.md: Instructions for suggesting policy changes.
• LICENSE.md: Proprietary notice for policy documents.
• CODE_OF_CONDUCT.md: Standard Contributor Covenant, customized for OSS and proprietary contexts.
• SECURITY.md: Vulnerability reporting policy with PGP encryption support.

• N/A (Initial release).

• N/A (Initial release).