# actionlake - security disclosure. RFC 9116.

Contact: mailto:security@actionlake.com
Expires: 2027-10-22T00:00:00Z
Policy: https://actionlake.com/trust#disclosure
Policy: https://actionlake.com/.well-known/actionlake-trust.json
Canonical: https://actionlake.com/.well-known/security.txt
Preferred-Languages: en

# Both Policy lines are the same policy: the Trust page's Disclosure section renders the
# `disclosure` object of the trust document (safe harbour, scope, what is out of scope, and the
# disclosure window). RFC 9116 allows Expires up to a year ahead; renew before it lapses.
#
# No Encryption field. No OpenPGP key exists for security@actionlake.com yet, and a
# fingerprint for a key nobody holds is worse than none - a report encrypted to it
# could never be read. Send reports in plain text until this line changes.