Google's Project Zero has announced a new "Full X" vulnerability disclosure policy that will progressively shorten the public disclosure window from 90 days to 30 days. The policy takes effect immediately as "Full 90," transitioning to 60 days on February 2, 2027, and ultimately to 30 days by January 3, 2028. The update abolishes the previous "90+30" framework along with grace period and variant rules, leaving only three exceptions: vulnerabilities already exploited in the wild, those whose details have been publicly disclosed elsewhere, and cases where vendors proactively request publication. Project Zero cited AI's accelerating impact on both vulnerability discovery and exploitation as the primary driver behind the tightened timeline.