# Security disclosure contact per RFC 9116.
#
# Rotation rule: bump Expires by one year on or before the date below.
# Source of truth: apps/root/public/.well-known/security.txt
# Same email is referenced from /trust (apps/root/src/lib/trust/posture.ts);
# keep them aligned if either side changes.

Contact: mailto:security@lovex.dev
Contact: https://lovex.dev/trust
Expires: 2027-05-17T00:00:00Z
Preferred-Languages: en, sv
Canonical: https://lovex.dev/.well-known/security.txt
Policy: https://lovex.dev/security/disclosure