---
title: Case studies
description: Public writeups for disclosed bounties, CVEs, and research. 14-day cadence from resolution.
section: craft
tags: [craft, writeups, security, index]
genre: index
lastUpdated: 2026-04-21
url: https://fardiniqbal.com/docs/craft/writeups
---


Writeups land here within fourteen days of every disclosed bounty. That
rhythm is a non-negotiable principle of the [bug-bounty
initiative](/docs/craft/initiatives/bug-bounty). If the clock starts and no
writeup ships in fourteen days, the risk register flips and the cadence is
broken.

The [template](/docs/craft/writeups/template) is here before any real
writeup. Infrastructure exists before output. That is by design.

## Shipped [#shipped]

Nothing disclosed yet. First disclosed bounty targets Month 3.