# RFC 9116 - security contact for Raphael, the Edenwelt nation engine.
#
# Served at /.well-known/security.txt. Note that `express.static` refuses to
# serve dotfile paths by default (`dotfiles: 'ignore'`), so app.ts registers an
# explicit route for this file rather than relying on the public-directory copy.
# If this file moves, that route needs to move with it.

Contact: mailto:legal@raphaelnrp.duckdns.org
Expires: 2027-10-08T00:00:00.000Z
Preferred-Languages: en

# No bug bounty is offered. Reports are still welcome and are read; a report
# that responsibly demonstrates a real issue is credited on request. If a
# bounty programme is ever added, it replaces this paragraph.
Acknowledgments: https://raphaelnrp.duckdns.org/legal

Policy: https://raphaelnrp.duckdns.org/legal

# Findings should be reported privately. Please do not test against the live
# server without permission, do not access data belonging to other users, and
# allow reasonable time for a fix before public disclosure.