[
 {
  "id": "2026-10-25-private-clock-semantics",
  "date": "2026-10-25",
  "title": "Separate confirmed releases from publication bounds",
  "before": "The private-report display could present advisory-date candidates or report-to-publication durations as time to fix. The private median mixed durations with upper bounds.",
  "after": "Only reviewed release evidence establishes a confirmed fix date. Patched-at-publication cases without that evidence show an upper bound. Unpatched-at-publication cases show a historical lower bound. Medians of confirmed fixes and publication bounds are separate, and ambiguous 120-day outcomes are unknown.",
  "reason": "An advisory's publication date does not prove when its fix became available. Methodology 1.1.0 makes this limitation explicit; private grades continue to use publication bounds conservatively where the source confirms a patch existed.",
  "links": [
   "https://daystopatch.com/methodology/"
  ]
 }
]