Embargo a security fix

Embargo a security fix

Mark the file embargoed until a unix timestamp. Push now; the key is withheld by the relay until reveal time.

echo "VULN_DETAILS=CVE-2025-XXXX" > security-fix.txt
printf 'security-fix.txt embargoed=1800000000\n' >> .lootattributes

loot describe -m "patch for CVE-2025-XXXX"
loot push          # relay holds ciphertext; key withheld until reveal_at

At reveal_at, the relay releases the key and anyone who pulls can read the fix.