Security Governance

RedMind Research Foundation is a California nonprofit organization recognized by the IRS as tax-exempt under Section 501(c)(3). We conduct open research and public education on AI systems, evaluation, verification, and human-AI collaboration.

Security Leadership

Luke Lu

Security Lead

Luke Lu oversees security governance for RedMind's research activities and controlled research environments.

In this role, he is responsible for:

• defining and reviewing the scope of authorized security-related research;
• maintaining appropriate access controls for RedMind-controlled research systems, accounts, and credentials;
• ensuring that security testing is limited to systems RedMind owns, controls, or is explicitly authorized to assess;
• maintaining and periodically reviewing access controls for RedMind-controlled research systems, accounts, and credentials; and
• escalating material security, privacy, or authorization concerns to RedMind's human leadership.

This is an operating role for an early-stage nonprofit research organization. RedMind's Board and officers retain responsibility for organizational governance, compliance, spending, filings, and formal decisions.

Authorized Research Boundaries

RedMind may conduct bounded, defensive research on AI systems in cybersecurity-relevant evaluation environments. This work may include reproducible sandboxed tasks involving secure-code review, vulnerability analysis, remediation planning, and human oversight.

RedMind's security-related research is limited to:

1. RedMind-created or RedMind-controlled research environments;
2. intentionally vulnerable test applications and sandboxed evaluation environments; and
3. third-party or open-source systems only when RedMind has explicit authorization to assess them.

RedMind does not conduct testing against live production systems, customer environments, critical infrastructure, or any third-party system without explicit authorization.

Responsible Disclosure

If RedMind identifies a potentially material security issue in an authorized research setting, we will seek to handle it responsibly and in coordination with the relevant system owner where appropriate.

To contact RedMind regarding a security-related matter, email: contact@redmindresearch.org

Luke Lu oversees security governance for RedMind's authorized security-related research and research environments.

Our Operating Principle

RedMind is human-governed, agent-collaborative, and open-by-default. AI agents may support research, monitoring, and documentation, but they do not receive authority to access systems, conduct security testing, or represent RedMind externally without explicit human authorization.