# RFC 9116 — security contact for vlue.ai and node.vlue.ai
#
# This is an experimental research system. The ledger is public and permanent;
# the code is open (Apache-2.0) and ships its own test gates. If you find a way
# to make the ledger lie — a forged signature, a settlement that doesn't follow
# the published law, a replay that diverges — that is the finding we most want.

Contact: https://github.com/vlue-ai/vlue-r1/issues
Expires: 2027-08-27T00:00:00.000Z
Preferred-Languages: en, ko
Canonical: https://vlue.ai/.well-known/security.txt
Policy: https://github.com/vlue-ai/vlue-r1/blob/main/fl22-r1/r1/NOTICE_EN.md

# Verify anything yourself before reporting — you may not need us:
#   full state replay from public keys, no secrets required
#   https://github.com/vlue-ai/vlue-r1/blob/main/fl22-r1/r1/VERIFIER_EN.md
#
# Known and published limits (please read before reporting these as findings):
#   availability is not guaranteed (no SLA), and checker code executes on the
#   operator's node — both are stated in NOTICE, not hidden.