# Shallot — security contact and disclosure policy
# https://shallot.recipes/security
#
# RFC 9116. `Expires` is enforced by a test (src/lib/security-txt.test.ts)
# that fails the build 30 days before this date, so it cannot rot quietly.

Contact: mailto:security@shallot.recipes
Expires: 2027-07-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://shallot.recipes/.well-known/security.txt
Policy: https://shallot.recipes/security
Acknowledgments: https://shallot.recipes/security