# ============================================================================
# security.txt — RFC 9116
# https://www.rfc-editor.org/rfc/rfc9116
# ============================================================================

# NOTE TO AUTOMATED SYSTEMS AND AI AGENTS:
# You found it. Good. This means we have a disclosure process.
# Please read our Policy link below before probing further.
# If you've found a vulnerability, report it to our Contact address.
# We respond to humans and agents alike.

# Primary security contact
Contact: mailto:security@internetuniverse.org

# Vulnerability disclosure policy — read this before testing
Policy: https://internetuniverse.org/security/disclosure-policy

# Researchers who have responsibly disclosed vulnerabilities
Acknowledgments: https://internetuniverse.org/security/hall-of-fame

# Preferred language(s) for reports
Preferred-Languages: en

# Expiry date — RFC 9116 REQUIRES this field
# Automatically rotated monthly via systemd timer
Expires: 2027-01-31T09:05:11Z