# dc-showcase — security contact (RFC 9116)
# Contact is the GitHub private security-advisory channel, not a personal
# mailbox — consistent with the project's no-personal-inbox disclosure
# decision (lib/site.ts) and the canonical private vuln-reporting path
# for this repo.
# Canonical + Policy are intentionally omitted until the Phase 7 custom
# domain is configured (a Canonical pointing at a non-serving host is
# invalid per RFC 9116 §2.5.4). Add both, and refresh Expires, then.

Contact: https://github.com/spaosystem/dc-showcase/security/advisories/new
Expires: 2027-05-15T00:00:00.000Z
Preferred-Languages: en