Research metrics methodology¶

The 211 research findings across 71 named projects shown on this site are a September 7, 2026 snapshot of Crucible's documented research inventory. A research finding is a recorded case in that inventory, including independently rediscovered known defects, robustness observations, and cases with different levels of validation. It is not necessarily a novel, vendor-accepted, or real-product-path vulnerability. A named project is a distinct primary target repository after normalizing aliases and separating targets that had been grouped under a shared folder.

The dated reconciliation preserved the finding total: 211 recorded cases − 4 excluded cases + 4 restored historical cases = 211. Project normalization changed the earlier label count: 72 labels − 3 alias merges + 2 distinct targets = 71 named projects. These are inventory counts, not a current count of open vulnerabilities, public CVEs, or affected deployments.

The case-level audit and its source files remain private because they include unpublished research and disclosure material. The public metrics data pins SHA-256 digests for the private audit report and reconciliation manifest, as well as this page. Those digests let an authorized reviewer check exact private artifacts; they do not independently prove the case membership to a public reader. The October 2026 inventory was not remeasured for these cards.