Skip to content

Commit 6236335

Browse files
authored
docs: support page + versions and releases section (replaces #23435, #23319) (#23571)
Replaces two autoclosed claudebox docs drafts, rebased onto current `next`: - **#23435** — adds the `/developers/support` page, surfaces Discord in navbar/footer, removes the Airtable signup gate, with @critesjosh's review comments folded in. - **#23319** — adds a `## Versions and releases` section to `docs/docs/networks.md`. No review comments were left on the original; straight re-open. Bundled into one PR because `create_pr` in this Slack session writes to a single session-derived branch. Squashes to one commit on merge — happy to split if a reviewer prefers. --- ## Reviewer's map of the diff 11 files, +362/−34. Grouped by change so you can review each independently. ### Part 1: Support page (was #23435) | File | What to look at | |------|-----------------| | `docs/docs-developers/support.md` *(new)* | The actual support page. Read top-to-bottom — decision tree → ask-first → file a bug → feature requests → docs issues → operator/node issues → security → "what happens after you file". The page exists in both the unversioned source and the v4.3.0 snapshot below; they are byte-identical. | | `docs/developer_versioned_docs/version-v4.3.0/support.md` *(new)* | Same content as the unversioned page, duplicated so the footer link (rendered across every version) resolves under the default mainnet version. No need to read this file separately — just confirm it matches the unversioned one. | | `docs/sidebars-developer.js` | One-line addition placing `support` in the developer sidebar after the getting-started entries. | | `docs/developer_versioned_sidebars/version-v4.3.0-sidebars.json` | Same sidebar entry for the v4.3.0 snapshot. | | `docs/docusaurus.config.js` | Navbar Resources dropdown: removes the Airtable `Join community` item, adds a `Support` link plus direct `Discord` and `Forum` items. Footer Community section: adds the main Aztec Discord (was missing) and the `Support` link. | | `docs/docs/index.mdx` | Homepage QuickLinks: replaces the Airtable `Join the Community` card with a `Support` card pointing at `/developers/support`. | | `docs/docs-developers/overview.md`, `getting_started_on_local_network.md`, `getting_started_on_testnet.md` | `:::tip Need help?` admonition appended to each, linking to `./support.md`. The two getting-started pages share the same block; `overview.md` uses a shorter variant. | **Review focus for Part 1:** - Is the decision tree at the top of `support.md` the right shape for what builders actually ask? - Is the security disclosure ordering (Cantina → PVR → email) right, and is the email fallback wording correct after the critesjosh fix below? - Are the navbar/footer/homepage swaps in `docusaurus.config.js` + `index.mdx` what we want, given there is no replacement gate for Discord beyond Discord's own member screening? **Changes folded in from @critesjosh's review of #23435:** 1. *Line 57 of `support.md`* — `sandbox` → `local network` in the PXE/wallet/CLI component bullet. 2. *Documentation issues section* — rewritten to discourage one-line typo PRs and direct typo reports to the bug-report template, calling out that docs issues route to `@AztecProtocol/devrel`. The "open a PR" affordance is preserved for larger restructures. 3. *Operator and node issues section* — adds an Aztec Discord pointer at the top of the section so the link is visible when a reader jumps straight here from the decision tree table, and explicitly links the bug-report template. 4. *Security issues fallback (step 3)* — removed the contradiction where the email fallback said "don't include exploit details, send those through PVR" — but PVR was just declared unavailable. Now asks for a brief impact summary first and defers exploit/repro details to a team-confirmed secure channel. ### Part 2: Versions and releases (was #23319) | File | What to look at | |------|-----------------| | `docs/docs/networks.md` | The only content change in Part 2. New `## Versions and releases` section sits between **Network technical information** and **Contract addresses**, covering: single-version monorepo model, three release channels (Stable / RC / Nightly) with an audience column, "RC is not newer than its matching stable" clarification, GitHub releases as the changelog source of truth, and cadence (~monthly, mid-month). Also adds a "Choosing a version" subsection under the Network selection guide, removes the now-redundant `:::note Developer SDK vs Node Versions` admonition near the top, converts touched headings to sentence case, and replaces em-dashes per `docs/CLAUDE.md`. | **Review focus for Part 2:** - Is the channels table audience column phrased the way DevRel wants to direct builders vs. operators? - The section deliberately avoids time-bound content. The original "Coming next: v4.3.0-rc.1" subsection was dropped during review in favor of pointing readers to the GitHub releases page as the authoritative timeline. Confirm that is the right call versus naming the current in-flight release. - The page lives at `docs/docs/networks.md`, which is the **root** (`id: "root"`, `routeBasePath: "/"`) Docusaurus instance and is **not** versioned — so this section only ever lives in one place by construction. ### Misc | File | What to look at | |------|-----------------| | `docs/docs-words.txt` | Two additions to the cspell dictionary: `devrel` (used in the support page typo-PR rewrite) and `nightlies` (used in the release-channels table of `networks.md`). | --- ## Test plan Support page: - [ ] `yarn && yarn start` from `docs/`; visit `/developers/support` and confirm the decision-tree table is readable and the security warning admonition is at the top. - [ ] Resources navbar dropdown shows "Support", "Discord", "Forum", "X/Twitter"; the old "Join community" / Airtable URL are gone. - [ ] Footer Community section lists "Support", "Forum", "Discord", "Noir Discord", "X (Twitter)". - [ ] Homepage Resources section shows the new "Support" card in place of the old Airtable card. - [ ] Both getting-started pages and the developer overview render the "Need help?" tip block at the bottom. Networks page: - [ ] `Versions and releases` section renders between the technical-information table and the contract-address tables; anchor links (`#versions-and-releases`, `#network-selection-guide`) resolve. Both: - [ ] `yarn build` succeeds with no broken-link or spellcheck errors (locally verified: `devrel` and `nightlies` are now in the dictionary). ## Follow-ups (deliberately not in this PR) From the issue-reporting v1 plan, scoped to separate PRs: - New `operator_issue.yml` template with node-specific fields. - "Is this a security issue?" gate on `bug_report.yml`. - Label additions (`P-medium`, `P-low`, `S-needs-repro`, `O-labs` / `O-wonderland` / `O-nethermind`, etc.). - An `aztec-starter` `config.yml` redirecting issues to this repo. Once those land, the support page already references them by name, so it stays accurate without further edits.
2 parents 574de15 + 3bc89ae commit 6236335

11 files changed

Lines changed: 362 additions & 34 deletions

File tree

Lines changed: 129 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,129 @@
1+
---
2+
title: Support
3+
sidebar_position: 5
4+
description: Where to ask questions, report bugs, request features, and disclose security issues for the Aztec stack.
5+
---
6+
7+
This page tells you where to go when something does not work, when you want to file a bug, when you have a feature idea, or when you have found a possible security issue. Pick the section that matches your situation.
8+
9+
:::warning Security issues are different
10+
If your issue involves loss of funds, key or seed disclosure, leakage of private notes, a way to forge or replay transactions, or anything you suspect could harm users, **do not open a public GitHub issue or post in Discord**. Use the [security disclosure process](#security-issues) instead.
11+
:::
12+
13+
## Quick decision tree
14+
15+
| Your situation | Where to go |
16+
| --- | --- |
17+
| Possible security issue (funds, keys, privacy, exploit) | [Security disclosure](#security-issues) |
18+
| You are not sure if the bug is real, or you cannot reproduce it yet | [Ask first: Forum or Discord](#ask-first-forum-and-discord) |
19+
| You have a reproducible bug in `aztec-packages` (PXE, aztec.js, aztec-nr, local network, CLI, AVM, barretenberg, L1 contracts) | [File a bug on GitHub](#file-a-bug) |
20+
| You have a Noir compiler or language bug | [Noir issues on `noir-lang/noir`](https://github.com/noir-lang/noir/issues) |
21+
| You have a feature request or enhancement idea | [File a feature request](#feature-requests) |
22+
| You are running a node, sequencer, or prover and hit an operator problem | [Operator support](#operator-and-node-issues) |
23+
| You want to suggest a documentation change | [File a docs issue](#documentation-issues) |
24+
25+
## Ask first: Forum and Discord
26+
27+
If you are not yet sure whether your problem is a real bug or a configuration issue, start in the community channels. You can often get a faster answer there, and the team can help you build a minimal reproduction before you open a GitHub issue.
28+
29+
- [Noir Discord](https://discord.com/invite/JtqzkdeQ6G): the developer-focused channel for syntax issues, compiler questions, and language-level help with Aztec.nr contracts.
30+
- [Aztec Forum](https://forum.aztec.network): long-form Q&A, best for design discussions, complex bug reports, and conversations you want indexed and searchable.
31+
- [Aztec Discord](https://discord.gg/aztec): the broader Aztec community space, and the live support channel for node operators (sequencers, provers, RPC nodes).
32+
33+
Once you have a clear reproduction, the right next step is to file a GitHub issue using the form below.
34+
35+
## File a bug
36+
37+
Reproducible bugs in the Aztec stack belong on GitHub. Use the bug template, which automatically labels your issue and helps a maintainer triage it.
38+
39+
[Open a new bug report](https://github.com/AztecProtocol/aztec-packages/issues/new?template=bug_report.yml)
40+
41+
### What a high-quality bug report includes
42+
43+
The template asks for these, and your issue will be triaged faster if you provide all of them.
44+
45+
1. **Aztec version**, for example `0.85.0-alpha-testnet.2`. Use `aztec-up list` if you are not sure.
46+
2. **What you were trying to do**, in one or two sentences.
47+
3. **A minimal, runnable reproduction**. A code snippet that compiles, or a link to a public repo branch, is much more useful than prose. If your reproduction is large, please trim it before filing.
48+
4. **Expected vs. actual behavior**.
49+
5. **Environment**: operating system, Node.js version, and browser if relevant.
50+
6. **Logs and errors**: the failing block, ideally with `LOG_LEVEL=debug` for the module that failed.
51+
7. **What you already tried**: workarounds, version downgrades, related issues you read.
52+
53+
### Where bugs in specific components go
54+
55+
All of the components below live in [`AztecProtocol/aztec-packages`](https://github.com/AztecProtocol/aztec-packages), so use the bug template above and let triage attach the component label.
56+
57+
- **PXE, wallet, CLI**: `aztec`, `aztec-wallet`, `aztec.js`, `bb.js`, local network.
58+
- **Aztec.nr framework**: the `aztec-nr` smart contract framework.
59+
- **Protocol circuits or protocol specs**: the rollup, kernels, and other circuits.
60+
- **Barretenberg, AVM, L1 contracts**: the prover backend, the Aztec Virtual Machine, and the Ethereum-side rollup contracts.
61+
62+
For the **Noir compiler** or the Noir language itself, file on [`noir-lang/noir`](https://github.com/noir-lang/noir/issues) instead.
63+
64+
## Feature requests
65+
66+
Use the feature request template for new functionality, enhancements to existing components, or proposed changes to the developer experience.
67+
68+
[Open a feature request](https://github.com/AztecProtocol/aztec-packages/issues/new?template=feature_request.yml)
69+
70+
Include:
71+
72+
- The problem you are trying to solve.
73+
- A concrete example or use case, if you have one.
74+
- Why this is impactful: what is unblocked or made easier if it ships.
75+
76+
## Documentation issues
77+
78+
If something in the docs is wrong, outdated, or missing, please **[open an issue](https://github.com/AztecProtocol/aztec-packages/issues/new?template=bug_report.yml)** with the bug template and quote the URL and paragraph that needs fixing. Docs issues are routed to [`@AztecProtocol/devrel`](https://github.com/orgs/AztecProtocol/teams/devrel) so a docs maintainer can pick them up.
79+
80+
This includes typos and small text issues: please file them as issues rather than opening single-line PRs. A maintainer can fix several at once, which is faster to review than a stream of one-line pull requests.
81+
82+
For larger restructures or new pages, open an issue first so a maintainer can confirm the direction before you write the change. Every docs page in this site has an "Edit this page" link at the bottom that takes you to the right file in [`docs-developers/`](https://github.com/AztecProtocol/aztec-packages/tree/next/docs/docs-developers) once the direction is agreed.
83+
84+
## Operator and node issues
85+
86+
For real-time help, the [Aztec Discord](https://discord.gg/aztec) is the fastest way to reach other operators and the Aztec team. Use it to sanity-check a failure mode before filing, or to coordinate with the team during an incident.
87+
88+
If you are running a node, sequencer, or prover and you hit a reproducible operational problem (sync failures, missed proposals, prover crashes, deployment errors), [open a bug report](https://github.com/AztecProtocol/aztec-packages/issues/new?template=bug_report.yml) and include the following alongside the standard bug-report fields:
89+
90+
- **Network** (mainnet, testnet, devnet, or local).
91+
- **Role** (sequencer, prover, RPC node).
92+
- **Block height at failure** and approximate UTC timestamp.
93+
- **Hardware**: CPU model, RAM, disk type and size.
94+
- **Container runtime and image version**.
95+
- **Configuration** (your `config.json` or environment block, with secrets redacted).
96+
- **Logs**: the last few hundred lines around the failure, with sensitive keys redacted.
97+
98+
Operator-specific guides live in the [Operate section](/operate/operators).
99+
100+
## Security issues
101+
102+
**Do not open a public GitHub issue for a suspected vulnerability.** Public disclosure can put users at risk before a fix is available.
103+
104+
Use one of the following, in order of preference:
105+
106+
1. **[Aztec Network Bug Bounty on Cantina](https://cantina.xyz/bounties/80e74370-10d8-4e52-8e4b-7294deb7c9ee)** if the issue is in scope of the bounty program.
107+
2. **[GitHub Private Vulnerability Reporting (PVR)](https://github.com/AztecProtocol/aztec-packages/security/advisories/new)** for any other suspected vulnerability. Go to the "Security" tab of the repository and click "Report a vulnerability".
108+
3. **Email `security@aztec.foundation`** if neither Cantina nor PVR is available to you. Send a brief impact summary first, without exploit details or reproduction steps, and wait for the team to confirm a secure channel before sharing them.
109+
110+
If you believe a vulnerability is being actively exploited or has severe impact (loss of funds, key compromise, or broad user impact), mark the report as **CRITICAL** in the PVR or email subject.
111+
112+
See the full [security policy](https://github.com/AztecProtocol/aztec-packages/blob/next/SECURITY.md) for more.
113+
114+
## What happens after you file
115+
116+
When you file a GitHub issue using one of the templates above, it is automatically tagged so the team can triage it. A maintainer will:
117+
118+
1. Confirm the component the issue belongs to.
119+
2. Set a priority based on impact.
120+
3. Ask follow-up questions if the report is missing a reproduction or context.
121+
4. Route the issue to the owning team.
122+
123+
The fastest way to a fix is a small, runnable reproduction. If you can attach one, please do.
124+
125+
## See also
126+
127+
- [`CONTRIBUTING.md`](https://github.com/AztecProtocol/aztec-packages/blob/next/CONTRIBUTING.md) for contribution guidelines.
128+
- [`SECURITY.md`](https://github.com/AztecProtocol/aztec-packages/blob/next/SECURITY.md) for the full security disclosure policy.
129+
- The [Aztec project board](https://github.com/orgs/AztecProtocol/projects/22) for in-flight work.

docs/developer_versioned_sidebars/version-v4.3.0-sidebars.json

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,11 @@
2121
"type": "doc",
2222
"id": "ai_tooling"
2323
},
24+
{
25+
"type": "doc",
26+
"id": "support",
27+
"label": "Support"
28+
},
2429
{
2530
"type": "link",
2631
"label": "Aztec Starter Repository",

docs/docs-developers/getting_started_on_local_network.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -266,3 +266,7 @@ Want to build something cool on Aztec?
266266
- Check out the [Token Contract Tutorial](./docs/tutorials/contract_tutorials/token_contract.md) for a beginner tutorial, or jump into more advanced ones
267267
- Ready for a live network? Try [deploying on testnet](./getting_started_on_testnet.md)
268268
- Start on your own thing and check out the How To Guides to help you!
269+
270+
:::tip Need help?
271+
If something does not work, see the [support guide](./support.md). It tells you when to ask in [Discord](https://discord.gg/aztec) or the [forum](https://forum.aztec.network), when to [open a GitHub issue](https://github.com/AztecProtocol/aztec-packages/issues/new?template=bug_report.yml), and how to disclose security issues responsibly.
272+
:::

docs/docs-developers/getting_started_on_testnet.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -205,3 +205,7 @@ For complete testnet technical details including contract addresses and network
205205
- Check out the [Tutorials](./docs/tutorials/contract_tutorials/counter_contract.md) for building more complex contracts
206206
- Learn about [paying fees](./docs/aztec-js/how_to_pay_fees.md) with different methods
207207
- Explore [Aztec Playground](https://play.aztec.network/) for an interactive development experience
208+
209+
:::tip Need help?
210+
If something does not work, see the [support guide](./support.md). It tells you when to ask in [Discord](https://discord.gg/aztec) or the [forum](https://forum.aztec.network), when to [open a GitHub issue](https://github.com/AztecProtocol/aztec-packages/issues/new?template=bug_report.yml), and how to disclose security issues responsibly.
211+
:::

docs/docs-developers/overview.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -92,3 +92,7 @@ As Aztec has native account abstraction, accounts do not automatically have a si
9292
## Noir
9393

9494
Noir is a zero-knowledge domain specific language used for writing smart contracts for the Aztec network. It is also possible to write circuits with Noir that can be verified on or offchain. For more in-depth docs into the features of Noir, go to the [Noir website](https://noir-lang.org/).
95+
96+
:::tip Need help?
97+
If something does not work, or you are not sure where to ask, see the [support guide](./support.md). It explains the right channel for questions, bug reports, feature requests, and security disclosures.
98+
:::

docs/docs-developers/support.md

Lines changed: 129 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,129 @@
1+
---
2+
title: Support
3+
sidebar_position: 5
4+
description: Where to ask questions, report bugs, request features, and disclose security issues for the Aztec stack.
5+
---
6+
7+
This page tells you where to go when something does not work, when you want to file a bug, when you have a feature idea, or when you have found a possible security issue. Pick the section that matches your situation.
8+
9+
:::warning Security issues are different
10+
If your issue involves loss of funds, key or seed disclosure, leakage of private notes, a way to forge or replay transactions, or anything you suspect could harm users, **do not open a public GitHub issue or post in Discord**. Use the [security disclosure process](#security-issues) instead.
11+
:::
12+
13+
## Quick decision tree
14+
15+
| Your situation | Where to go |
16+
| --- | --- |
17+
| Possible security issue (funds, keys, privacy, exploit) | [Security disclosure](#security-issues) |
18+
| You are not sure if the bug is real, or you cannot reproduce it yet | [Ask first: Forum or Discord](#ask-first-forum-and-discord) |
19+
| You have a reproducible bug in `aztec-packages` (PXE, aztec.js, aztec-nr, local network, CLI, AVM, barretenberg, L1 contracts) | [File a bug on GitHub](#file-a-bug) |
20+
| You have a Noir compiler or language bug | [Noir issues on `noir-lang/noir`](https://github.com/noir-lang/noir/issues) |
21+
| You have a feature request or enhancement idea | [File a feature request](#feature-requests) |
22+
| You are running a node, sequencer, or prover and hit an operator problem | [Operator support](#operator-and-node-issues) |
23+
| You want to suggest a documentation change | [File a docs issue](#documentation-issues) |
24+
25+
## Ask first: Forum and Discord
26+
27+
If you are not yet sure whether your problem is a real bug or a configuration issue, start in the community channels. You can often get a faster answer there, and the team can help you build a minimal reproduction before you open a GitHub issue.
28+
29+
- [Noir Discord](https://discord.com/invite/JtqzkdeQ6G): the developer-focused channel for syntax issues, compiler questions, and language-level help with Aztec.nr contracts.
30+
- [Aztec Forum](https://forum.aztec.network): long-form Q&A, best for design discussions, complex bug reports, and conversations you want indexed and searchable.
31+
- [Aztec Discord](https://discord.gg/aztec): the broader Aztec community space, and the live support channel for node operators (sequencers, provers, RPC nodes).
32+
33+
Once you have a clear reproduction, the right next step is to file a GitHub issue using the form below.
34+
35+
## File a bug
36+
37+
Reproducible bugs in the Aztec stack belong on GitHub. Use the bug template, which automatically labels your issue and helps a maintainer triage it.
38+
39+
[Open a new bug report](https://github.com/AztecProtocol/aztec-packages/issues/new?template=bug_report.yml)
40+
41+
### What a high-quality bug report includes
42+
43+
The template asks for these, and your issue will be triaged faster if you provide all of them.
44+
45+
1. **Aztec version**, for example `0.85.0-alpha-testnet.2`. Use `aztec-up list` if you are not sure.
46+
2. **What you were trying to do**, in one or two sentences.
47+
3. **A minimal, runnable reproduction**. A code snippet that compiles, or a link to a public repo branch, is much more useful than prose. If your reproduction is large, please trim it before filing.
48+
4. **Expected vs. actual behavior**.
49+
5. **Environment**: operating system, Node.js version, and browser if relevant.
50+
6. **Logs and errors**: the failing block, ideally with `LOG_LEVEL=debug` for the module that failed.
51+
7. **What you already tried**: workarounds, version downgrades, related issues you read.
52+
53+
### Where bugs in specific components go
54+
55+
All of the components below live in [`AztecProtocol/aztec-packages`](https://github.com/AztecProtocol/aztec-packages), so use the bug template above and let triage attach the component label.
56+
57+
- **PXE, wallet, CLI**: `aztec`, `aztec-wallet`, `aztec.js`, `bb.js`, local network.
58+
- **Aztec.nr framework**: the `aztec-nr` smart contract framework.
59+
- **Protocol circuits or protocol specs**: the rollup, kernels, and other circuits.
60+
- **Barretenberg, AVM, L1 contracts**: the prover backend, the Aztec Virtual Machine, and the Ethereum-side rollup contracts.
61+
62+
For the **Noir compiler** or the Noir language itself, file on [`noir-lang/noir`](https://github.com/noir-lang/noir/issues) instead.
63+
64+
## Feature requests
65+
66+
Use the feature request template for new functionality, enhancements to existing components, or proposed changes to the developer experience.
67+
68+
[Open a feature request](https://github.com/AztecProtocol/aztec-packages/issues/new?template=feature_request.yml)
69+
70+
Include:
71+
72+
- The problem you are trying to solve.
73+
- A concrete example or use case, if you have one.
74+
- Why this is impactful: what is unblocked or made easier if it ships.
75+
76+
## Documentation issues
77+
78+
If something in the docs is wrong, outdated, or missing, please **[open an issue](https://github.com/AztecProtocol/aztec-packages/issues/new?template=bug_report.yml)** with the bug template and quote the URL and paragraph that needs fixing. Docs issues are routed to [`@AztecProtocol/devrel`](https://github.com/orgs/AztecProtocol/teams/devrel) so a docs maintainer can pick them up.
79+
80+
This includes typos and small text issues: please file them as issues rather than opening single-line PRs. A maintainer can fix several at once, which is faster to review than a stream of one-line pull requests.
81+
82+
For larger restructures or new pages, open an issue first so a maintainer can confirm the direction before you write the change. Every docs page in this site has an "Edit this page" link at the bottom that takes you to the right file in [`docs-developers/`](https://github.com/AztecProtocol/aztec-packages/tree/next/docs/docs-developers) once the direction is agreed.
83+
84+
## Operator and node issues
85+
86+
For real-time help, the [Aztec Discord](https://discord.gg/aztec) is the fastest way to reach other operators and the Aztec team. Use it to sanity-check a failure mode before filing, or to coordinate with the team during an incident.
87+
88+
If you are running a node, sequencer, or prover and you hit a reproducible operational problem (sync failures, missed proposals, prover crashes, deployment errors), [open a bug report](https://github.com/AztecProtocol/aztec-packages/issues/new?template=bug_report.yml) and include the following alongside the standard bug-report fields:
89+
90+
- **Network** (mainnet, testnet, devnet, or local).
91+
- **Role** (sequencer, prover, RPC node).
92+
- **Block height at failure** and approximate UTC timestamp.
93+
- **Hardware**: CPU model, RAM, disk type and size.
94+
- **Container runtime and image version**.
95+
- **Configuration** (your `config.json` or environment block, with secrets redacted).
96+
- **Logs**: the last few hundred lines around the failure, with sensitive keys redacted.
97+
98+
Operator-specific guides live in the [Operate section](/operate/operators).
99+
100+
## Security issues
101+
102+
**Do not open a public GitHub issue for a suspected vulnerability.** Public disclosure can put users at risk before a fix is available.
103+
104+
Use one of the following, in order of preference:
105+
106+
1. **[Aztec Network Bug Bounty on Cantina](https://cantina.xyz/bounties/80e74370-10d8-4e52-8e4b-7294deb7c9ee)** if the issue is in scope of the bounty program.
107+
2. **[GitHub Private Vulnerability Reporting (PVR)](https://github.com/AztecProtocol/aztec-packages/security/advisories/new)** for any other suspected vulnerability. Go to the "Security" tab of the repository and click "Report a vulnerability".
108+
3. **Email `security@aztec.foundation`** if neither Cantina nor PVR is available to you. Send a brief impact summary first, without exploit details or reproduction steps, and wait for the team to confirm a secure channel before sharing them.
109+
110+
If you believe a vulnerability is being actively exploited or has severe impact (loss of funds, key compromise, or broad user impact), mark the report as **CRITICAL** in the PVR or email subject.
111+
112+
See the full [security policy](https://github.com/AztecProtocol/aztec-packages/blob/next/SECURITY.md) for more.
113+
114+
## What happens after you file
115+
116+
When you file a GitHub issue using one of the templates above, it is automatically tagged so the team can triage it. A maintainer will:
117+
118+
1. Confirm the component the issue belongs to.
119+
2. Set a priority based on impact.
120+
3. Ask follow-up questions if the report is missing a reproduction or context.
121+
4. Route the issue to the owning team.
122+
123+
The fastest way to a fix is a small, runnable reproduction. If you can attach one, please do.
124+
125+
## See also
126+
127+
- [`CONTRIBUTING.md`](https://github.com/AztecProtocol/aztec-packages/blob/next/CONTRIBUTING.md) for contribution guidelines.
128+
- [`SECURITY.md`](https://github.com/AztecProtocol/aztec-packages/blob/next/SECURITY.md) for the full security disclosure policy.
129+
- The [Aztec project board](https://github.com/orgs/AztecProtocol/projects/22) for in-flight work.

0 commit comments

Comments
 (0)