Title : Building the lab in public

Abstract: A short note about the scope, method, and publication standards for CMD Research.

CMD Research starts with a simple rule: a result is useful only when another researcher can test it.

What you can expect

Each report will state the test conditions, the observed behavior, and the security impact. When code helps to confirm a result, the report will include a small proof of concept.

# Reproduce, record, and verify.
run-test --target isolated-lab

Reports will separate verified facts from assumptions. They will also include detection and remediation notes when these notes can help defenders.

Responsible research

The lab tests only systems that it owns or has permission to test. If a finding affects a third party, publication follows a coordinated disclosure process.