# security.txt — seele.agency
# Paste verbatim at: https://seele.agency/.well-known/security.txt
# Also paste verbatim at: https://docs.seele.agency/.well-known/security.txt
# (Repeat for any other subdomain that ships user-facing code.)
#
# Format reference: https://securitytxt.org/ (draft v20)
# Last reviewed: 2026-07-31

# --- Required fields ---

Contact: mailto:security@seele.agency
Contact: https://seele.agency/security
Expires: 2027-07-31T00:00:00.000Z

# --- Optional but recommended ---

Encryption: https://seele.agency/.well-known/pgp-key.txt
# (Linked PGP public key. If the URL changes, update this file BEFORE the old
# key is retired — security researchers will be following old links for a while.)

Preferred-Languages: en

Canonical: https://seele.agency/.well-known/security.txt

# --- Acknowledgments ---

Acknowledgments: https://seele.agency/security/acknowledgments
# Researchers who report a valid issue and follow our disclosure policy are
# listed (with consent). We do not run a paid bounty at this time.

# --- Policy ---

Policy: https://seele.agency/security
# TL;DR: report privately, give us 90 days to triage + patch, no public
# disclosure before coordinated release. We will acknowledge within 3 business
# days.

# --- Hiring ---

Hiring: https://seele.agency/careers
# (Include only if you actually have an open security role. Remove otherwise.)