If the social-media behemoth finds a bug in another platform's code, the project has 90 days to remediate before Facebook goes public.