When do Canadian spies disclose the software flaws they find? There's a policy, but few details

A similar process helps U.S. spies decide whether to report flaws to tech companies or keep them secret for future use.