# EthicVault — responsible disclosure
#
# We govern AI at the execution boundary, so we would rather hear about a
# weakness from you than discover it in an incident. Reports are welcome
# whether or not they qualify as severe, and we will not pursue legal action
# against good-faith research that respects the scope below.

Contact: mailto:security@ethicvault.com
Contact: https://www.ethicvaults.com/security
Preferred-Languages: en, ar, fr, de, es, zh
Canonical: https://www.ethicvaults.com/.well-known/security.txt
Policy: https://www.ethicvaults.com/security

# Expires must be a future date and should be refreshed at least annually.
Expires: 2027-07-23T00:00:00.000Z

# In scope
#   *.ethicvaults.com, *.ethicvault.com
#
# Out of scope
#   Denial of service, social engineering, physical attacks, and findings
#   that require a compromised end-user device.
#
# Please include enough detail to reproduce, and give us a reasonable window
# to remediate before public disclosure.