# FaultLine — machine-readable security contact (RFC 9116).
#
# This file is the machine-readable form of the coordinated vulnerability disclosure
# policy published at https://faultline.ca/security.html. It states NOTHING that the
# policy page does not already state; if the two ever disagree, security.html governs
# and this file is the stale one.
#
# WHY IT EXISTS: security.html has declared "Machine-readable at /.well-known/security.txt
# (RFC 9116)" since 2026-07-15, and robots.txt and humans.txt both point here. The file
# did not exist, so all nine references 404'd — a page claiming standards compliance for a
# document that was not being served.
#
# RFC 9116 (https://www.rfc-editor.org/rfc/rfc9116.txt):
#   §2.5   "Unless otherwise stated, all fields MUST be considered optional."
#   §2.5.3 Contact — "This field MUST always be present in a 'security.txt' file."
#   §2.5.5 Expires — "MUST always be present and MUST NOT appear more than once";
#          RFC 3339 timestamp; "RECOMMENDED that the value of this field be less than a
#          year into the future to avoid staleness."
#   §3     MUST live under /.well-known/, be served over https, Content-Type text/plain
#          with charset utf-8.
#
# ⚠️ MAINTENANCE: Expires is not decoration. Past that date this file is formally stale and
# a researcher is entitled to disregard it. Renew it — and re-check the addresses below —
# before it lapses.

Contact: mailto:security@volenti.ca
Expires: 2027-07-01T00:00:00.000Z
Policy: https://faultline.ca/security.html
Canonical: https://faultline.ca/.well-known/security.txt
Preferred-Languages: en