# RFC 9116 security contact. Placeholders below must be replaced before launch
# with the values in lib/legal/config.ts (securityEmail, websiteUrl).
# Expires must be renewed at least annually (RFC 9116 requires a future date).
Contact: mailto:[SECURITY EMAIL]
Expires: 2027-09-29T00:00:00.000Z
Preferred-Languages: en
Policy: [WEBSITE URL]/docs/legal/vulnerability-disclosure
Canonical: [WEBSITE URL]/.well-known/security.txt