# §13 requires a security.txt, a disclosure policy and a monitored address.
# RFC 9116.
#
# The Expires field is mandatory and is the point of the file: a stale
# security.txt tells a researcher the contact is probably dead, and they give
# up rather than report. Renew it annually.

Contact: mailto:security@guftagu.ai
Expires: 2027-08-27T00:00:00.000Z
Preferred-Languages: en, ur
Canonical: https://guftagu.ai/.well-known/security.txt
Policy: https://guftagu.ai/en/legal/security
Acknowledgments: https://guftagu.ai/en/legal/security#thanks