Auditor onboarding + PoC template

[truthixify]

Tier: S (1-2 days) | Type: docs

Context. reference/security-disclosure.mdx and reference/threat-model.mdx landed in Wave 7 but there is no on-ramp for a researcher who wants to actually file a finding: no repro-repo template, no severity matrix, no reward posture spelled out. Auditors expect a one-page "start here" that mirrors what large protocols publish.

Scope.

• New reference/auditor-guide.mdx.
• Severity matrix (Critical/High/Medium/Low) with concrete Wraith-shaped examples.
• Reward posture (or explicit "reputation-only" if that is the current state).
• PoC repo template link + expected structure (README, repro script, expected output).
• SLA table (ack, triage, fix, disclosure).
• Cross-link with security-disclosure.mdx and threat-model.mdx.

Acceptance.

• Severity examples reviewed by contracts maintainer
• Template repo link resolves
• Renders in mint dev
• Passes Compile docs snippets CI
• Linked from both security-disclosure.mdx and per-repo SECURITY.md

Files. reference/auditor-guide.mdx (new), reference/security-disclosure.mdx.

[Andreas2410]

@Andreas2410 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hello Maintainer, I’m interested in working on this issue. I have experience with similar tasks and can begin immediately

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Andreas2410 to this issue.

[devprom6]

@devprom6 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

I’d like to work on this issue because it addresses an important area of the project and presents a great opportunity to make a meaningful contribution. I’m particularly interested in delivering a solution that is reliable, maintainable, and aligned with the project’s existing architecture and development standards.

I have experience working across software development, including backend and frontend development, APIs, databases, testing, DevOps, and blockchain-based applications. I’m comfortable understanding existing codebases, identifying the root cause of issues, implementing clean and scalable solutions, and writing thorough tests to prevent regressions.

My approach would be to first understand the existing implementation and project conventions, then develop the solution in a focused and incremental way. I’ll ensure the changes are well-tested, documented where necessary, and do not introduce unnecessary complexity or break existing functionality. I’m also committed to clear communication, responding to review feedback, and delivering a polished contribution that provides real value to the project.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @devprom6 to this issue.

[Kingsley4867]

@Kingsley4867 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hello maintainer, kindly review my application and assign this issue to me.
I’ll create the auditor onboarding guide with severity examples, reward posture, PoC template, and SLA guidance.
I’ll also cross-link the guide, verify the template and docs rendering, and update the required security references.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Kingsley4867 to this issue.

[drips-wave]

Congratulations, @devprom6! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on August 31, 2026.

🧑‍💻 @devprom6: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊