# Pact — security.txt (RFC 9116)
# Machine-readable vulnerability-disclosure policy. The human-readable
# policy, scope, and safe-harbor terms live at
# https://pact.place/security/disclosure (web/src/app/security/disclosure/).
#
# Maintenance: refresh the Expires date annually (CI fails once it is in
# the past — see tests/test_security_txt.py). Keep Contact in sync with the
# disclosure block in core/compliance/frameworks.py and with
# web/src/lib/security/disclosure.ts; the test fails when they drift.

Contact: mailto:security@pact.place
Expires: 2027-06-22T23:59:59.000Z
Preferred-Languages: en
Canonical: https://pact.place/.well-known/security.txt
Policy: https://pact.place/security/disclosure