# Handsel security disclosure surface (RFC 9116).
# The machine economy runs a tab, not a signup — and it runs in the open.
# Coordinated disclosure is welcome. Policy: https://handsel.ai/security
#
# NOTE: Expires is a FIXED placeholder set to +1yr from the 2026-07-21 authoring
# date. RFC 9116 requires a real future timestamp, so it is a valid date rather
# than a token; RESET it to +1yr at each publish (and whenever this file is
# re-signed) — a lapsed Expires makes the file untrustworthy to scanners.

Contact: mailto:security@handsel.ai
Expires: 2027-07-21T00:00:00.000Z
Policy: https://handsel.ai/security
Preferred-Languages: en
Canonical: https://handsel.ai/.well-known/security.txt