# Vulnerability disclosure - ResidualsOS
# https://www.rfc-editor.org/rfc/rfc9116

Contact: mailto:security@residualsos.com
Expires: 2027-07-28T00:00:00Z
Preferred-Languages: en
Canonical: https://residualsos.com/.well-known/security.txt
Canonical: https://app.residualsos.com/.well-known/security.txt

# If you have found a vulnerability, please tell us before disclosing it
# publicly. We will acknowledge within 3 business days and keep you updated
# until it is resolved. We will not pursue legal action against researchers
# who act in good faith and avoid privacy violations, data destruction, or
# service degradation.