Embargo a security fix
Mark the file embargoed until a unix timestamp. Push now; the key is withheld by the relay until reveal time.
echo "VULN_DETAILS=CVE-2025-XXXX" > security-fix.txt printf 'security-fix.txt embargoed=1800000000\n' >> .lootattributes loot describe -m "patch for CVE-2025-XXXX" loot push # relay holds ciphertext; key withheld until reveal_at
At reveal_at, the relay releases the key and anyone who pulls can read the fix.