Contact: mailto:security@kestrel.io
Expires: 2027-08-01T00:00:00.000Z
Encryption: https://kestrl.nallman.dev/trust/pgp-key.txt
Preferred-Languages: en
Canonical: https://kestrl.nallman.dev/.well-known/security.txt
Policy: https://kestrl.nallman.dev/trust/#compliance
Acknowledgments: https://kestrl.nallman.dev/trust/#compliance

# The inbox is monitored by a human on a one-business-day acknowledgement
# target. We agree a disclosure timeline with you rather than imposing one, and
# we do not threaten good-faith researchers. There is no bounty programme yet.
# We would rather say that than imply one exists.