# GitAegis: machine-readable vulnerability disclosure policy (RFC 9116).
#
# Referenced by /legal/security-disclosure §6.3. There is no Encryption field
# because no PGP key has been published for security@gitaegis.com yet; a
# security.txt that points at a key nobody can fetch is worse than one that
# admits there is none. Add Encryption on the same day the key is published.
#
# Expires is one year out. An expired security.txt reads as an abandoned
# programme, so renew this file before 2027-08-10.

Contact: mailto:security@gitaegis.com
Policy: https://gitaegis.com/legal/security-disclosure
Preferred-Languages: en
Canonical: https://gitaegis.com/.well-known/security.txt
Expires: 2027-08-10T00:00:00.000Z