Code of
Conduct.

Effective Date: August 7, 2026

The Broken Table Project (“TBTP,” “we,” “our,” or “the Project”) is a student-led community working toward a safer digital world.

Our standard

Do not settle for being merely decent. Be genuinely kind.

Treat others with care, patience, and respect. Help create a community where people feel safe to learn, ask questions, make mistakes, and contribute.

Expected Behavior

Members of our community are expected to:

• Treat everyone with respect and kindness.
• Welcome beginners and explain things without making them feel small.
• Give feedback constructively and receive feedback with an open mind.
• Respect different backgrounds, experiences, identities, abilities, and viewpoints.
• Protect other people’s privacy and personal information.
• Use security knowledge to protect people, not to harm them.
• Take responsibility for their words, actions, code, and contributions.
• Respect project rules, applicable laws, platform policies, and the rights of others.
• Report serious safety, security, or conduct concerns privately.

Unacceptable Behavior

The following behavior is not permitted:

• Harassment, threats, intimidation, stalking, or personal attacks.
• Discrimination or hateful conduct.
• Sexual harassment or unwanted sexual attention.
• Publishing another person’s private information without permission.
• Deliberately humiliating, excluding, or targeting another person.
• Encouraging illegal activity, unauthorized access, malware distribution, credential theft, or harm to systems or individuals.
• Disrupting the Project, its infrastructure, or its community.
• Retaliating against anyone who reports a concern in good faith.
• Abusing this Code of Conduct or the reporting process to knowingly make false or malicious allegations.

Security and Ethics

Learning about cybersecurity does not grant permission to access, test, scan, modify, or interfere with systems that you do not own or have explicit authorization to test.

Community membership, educational intent, or participation in TBTP does not provide legal authorization for security testing.

Reporting Concerns

Conduct concerns should be reported privately to mail@triplecolons.dev.

Please include enough information for us to understand the concern. Do not publicly share sensitive personal information, security details, or evidence that could create additional harm.

Enforcement

Project maintainers may take any action they reasonably consider appropriate, including:

• Giving a private warning.
• Removing content.
• Restricting participation.
• Temporarily suspending access.
• Permanently removing a participant.
• Reporting serious threats or unlawful activity to the relevant platform, service provider, or authority.

We may act immediately when we reasonably believe that doing so is necessary to protect people, the Project, or its infrastructure.

Enforcement decisions may consider the seriousness, context, history, and potential impact of the conduct. We are not required to publicly disclose reports, evidence, deliberations, identities, security information, or specific enforcement procedures.

This Code of Conduct does not create an employment, partnership, agency, fiduciary, or contractual relationship between participants and TBTP.

Scope

This Code applies in Project spaces and when someone is publicly representing the Project. Project spaces may include websites, repositories, issue trackers, discussions, events, chats, social media, and other official community channels.

Our Goal

Everyone deserves a safer digital world. Let us build one by being more than merely acceptable. Let us be genuinely kind.