Public review · 6 Jul – 15 Aug 2026

Submit a review finding

Three ways in — pick whichever fits. Every finding gets a category and a severity, is triaged within five working days, and receives a documented accept / reject / defer decision before the 1.0 freeze.

1 · GitHub issue (preferred)

Structured template with category and severity dropdowns. Best for card-level, formula, taxonomy and YAML findings — and the fastest way to see your finding tracked publicly.

Open the finding template
2 · Review form (no GitHub account)

Same fields, two minutes. Findings from the form are mirrored into the public log during triage.

Open the review form
3 · Confidential email

For enterprise reviewers who can't comment publicly. Confidential findings are counted in the review KPIs without attribution.

review@opensecuritymetrics.org
data-en="What makes a strong finding: name the card ID (e.g. OSMS-DR-014), pick one of the twelve categories (card contract, formula, data source, data confidence, taxonomy, domain, decision chain, evidence, hierarchy, board relevance, implementation, language) and a severity — critical blocks the freeze, major must be decided before it, minor is editorial." data-de="Was ein starkes Finding ausmacht: Nenne die Karten-ID (z. B. OSMS-DR-014), wähle eine der zwölf Kategorien (Kartenvertrag, Formel, Datenquelle, Datenkonfidenz, Taxonomie, Domäne, Entscheidungskette, Evidenz, Hierarchie, Board-Relevanz, Implementierung, Sprache) und einen Schweregrad — critical blockiert den Freeze, major muss davor entschieden werden, minor ist redaktionell." data-h="1">What makes a strong finding: name the card ID (e.g. OSMS-DR-014), pick one of the twelve categories (card contract, formula, data source, data confidence, taxonomy, domain, decision chain, evidence, hierarchy, board relevance, implementation, language) and a severity — critical blocks the freeze, major must be decided before it, minor is editorial.
data-en="Prefer milestones by mail? Get a short update at review checkpoints, freeze, the 1.0 release — and project news like the book, platform and academy: subscribe here (double opt-in, unsubscribe anytime) — or watch releases on GitHub." data-de="Lieber Meilensteine per Mail? Erhalte ein kurzes Update zu Review-Checkpoints, Freeze und dem 1.0-Release — und Projektneuigkeiten wie Buch, Plattform und Academy: hier abonnieren (Double Opt-in, jederzeit abbestellbar) — oder Releases auf GitHub verfolgen." data-h="1">Prefer milestones by mail? Get a short update at review checkpoints, freeze, the 1.0 release — and project news like the book, platform and academy: subscribe here (double opt-in, unsubscribe anytime) — or watch releases on GitHub.