---
title: "Embargo a security fix"
url: https://loot.build/docs/guides/embargo
group: "Guides"
status: written
summary: "Push the patch; the relay withholds the key until reveal time."
---

# Embargo a security fix

> Push the patch; the relay withholds the key until reveal time.

Mark the file embargoed until a unix timestamp. Push now; the key is withheld by the relay until reveal time.

```bash
echo "VULN_DETAILS=CVE-2025-XXXX" > security-fix.txt
printf 'security-fix.txt embargoed=1800000000\n' >> .lootattributes

loot describe -m "patch for CVE-2025-XXXX"
loot push          # relay holds ciphertext; key withheld until reveal_at
```

At `reveal_at`, the relay releases the key and anyone who pulls can read the fix.