# Security disclosure policy for xanadu.run
# https://xanadu.run/security
#
# We treat security disclosure as a load-bearing public commitment.
# Reports are read by a human within 24 hours, acknowledged within
# 72, and patched on a published timeline (see /security).

Contact: mailto:security@xanadu.run
Contact: https://xanadu.run/security
Expires: 2027-12-31T23:59:59Z
Preferred-Languages: en
Canonical: https://xanadu.run/.well-known/security.txt
Policy: https://xanadu.run/security
Acknowledgments: https://xanadu.run/security#recognition