# HeldFor security contact (RFC 9116).
# TODO before mainnet: replace <<DOMAIN>> (also in docs/bug-bounty.md), add the PGP key file,
# and set Expires to less than one year after publishing. Re-publish before it expires.
Contact: mailto:security@<<DOMAIN>>
Expires: 2027-10-01T00:00:00.000Z
Encryption: https://<<DOMAIN>>/.well-known/pgp-key.txt
Policy: https://<<DOMAIN>>/docs#audit
Preferred-Languages: en, lv
Canonical: https://<<DOMAIN>>/.well-known/security.txt