# Trenchant Countersign — security contact
#
# RENEW BEFORE THE EXPIRES DATE BELOW. An expired security.txt is worse than
# no security.txt: it reads as an abandoned product, which is the opposite of
# what it is here to say. RFC 9116 requires the field and requires it to be
# less than one year out, so this cannot simply be set far into the future.
#
# Canonical and Policy below assume this site is served from
# countersign.trenchantlabs.com. If it moves, both must change --
# a Canonical that does not match where this file actually lives is a
# validation failure, not a cosmetic one. See marketing/README.md.

Contact: mailto:security@trenchantlabs.com
Expires: 2027-09-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://countersign.trenchantlabs.com/.well-known/security.txt
Policy: https://countersign.trenchantlabs.com/security-policy.html