Japan AI Guidelines HP.II: D-II. Post-deployment vulnerabilities, incidents and misuse

After deployment including placing on the market, identify and mitigate vulnerabilities and, where appropriate, incidents and patterns of misuse. Code of Conduct detail: use systems as intended and monitor for vulnerabilities, incidents, emerging risks and misuse at a timing commensurate with the risk level, and act on them; consider enabling third parties and users to find and report issues, for example through bounty systems, contests or prizes for responsible disclosure; keep appropriate documentation of reported incidents and mitigate the risks with other stakeholders; and make vulnerability reporting mechanisms accessible to diverse stakeholders.