cd /news/ai-safety/project-zero-ends-the-grace-period-a… · home › topics › ai-safety › article
[ARTICLE · art-169913] src=byteiota.com ↗ pub= topic=ai-safety verified=true sentiment=· neutral

Project Zero Ends the Grace Period — AI Is Why

Google Project Zero ended its "90 + 30" vulnerability disclosure policy on November 13, replacing it with a "Full 90" policy under which technical details go public exactly 90 days after a bug is reported to a vendor, regardless of whether a patch exists. The change removes the 30-day buffer that since 2021 gave vendors extra time before details were published after shipping a fix, and Project Zero attributes the shift to AI. The post frames the old soak period as designed for a world where patching and attacker exploitation moved at a slower pace.

read1 min views1 publishedNov 15, 2026

Google Project Zero killed the grace period on November 13. Under the old “90 + 30” policy that has governed vulnerability disclosure since 2021, vendors who shipped a patch got an additional 30-day buffer before technical details went public — time for users to install the fix before attackers could read the diff. That buffer is gone. Under the new “Full 90” policy, disclosure happens exactly 90 days after Project Zero reports a bug to a vendor, whether or not a fix exists. Patch status no longer moves the deadline. The 30-day soak period was designed for a world where […]

The post

source & further reading
byteiota.com — original article RTK: Cut AI Coding Agent Token Usage by 60–90% Google Antigravity Orchestrator: Two Models, 24% Less Quota 90% of AI-Written Unit Tests Are Useless — Here’s the Fix
── more in #ai-safety 4 stories · sorted by recency
── more on @google project zero 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/project-zero-ends-th…] indexed:0 read:1min 2026-11-15 · —