# Cornerstone Contracts — security disclosure (RFC 9116)
# https://cornerstonecontracts.com/.well-known/security.txt

Contact: mailto:security@cornerstonecontracts.com
Expires: 2027-04-25T00:00:00.000Z
Preferred-Languages: en, fr
Canonical: https://cornerstonecontracts.com/.well-known/security.txt
Policy: https://cornerstonecontracts.com/trust

# We welcome reports of security vulnerabilities affecting Cornerstone
# Contracts. Please email security@cornerstonecontracts.com with:
#   - A description of the issue
#   - Steps to reproduce
#   - Affected URLs / endpoints
#   - Your contact info if you'd like an acknowledgement
#
# We commit to acknowledging receipt within 5 business days and providing
# a substantive response within 15 business days. Please do not exploit,
# disclose, or share the vulnerability publicly until we've had a chance
# to remediate. Good-faith research conducted under this policy is welcome
# and we will not pursue legal action for activity consistent with the
# guidance here.