Our disclosure workflow is intentionally light on ceremony and heavy on artifacts. On first contact, we ship an executive summary plus a technical report. On acknowledgement, we ship a reproduction package and mitigation guidance. On remediation, we retest and issue a final validation memo.
The point is to avoid the pattern where a disclosure becomes a negotiation. Every artifact is technical, reproducible, and signed off by both the researcher and the reviewer.