RFPolicy 2.0 - rain forest puppy's policy on notifying vendors and releasing security vulnerabilities.
Changes: Less stringent on timeframes, more stringent on communication. Thanks to everyone who contributed. I also added some supporting notes (FAQ, etc) to help dispell some misconceptions on it.