# Narrative AI, LLC - security contact information (RFC 9116)
#
# This file is deliberately pure ASCII. Vercel serves .txt as
# "text/plain; charset=utf-8" in production (verified), but the dev server
# omits the charset, and RFC 9116 consumers are parsers, not browsers.
# Keep it ASCII-only so no consumer can mangle it.
#
# Full vulnerability disclosure policy, including scope, safe harbor, and our
# response commitments: https://getnarrativeai.com/security#vulnerability-disclosure
#
# Please do not report vulnerabilities through sales or support channels.
# We acknowledge reports within three business days and give an initial
# assessment within ten business days. We do not run a paid bug bounty.
#
# IMPORTANT: refresh the Expires value below before 2027-10-05. A security.txt
# past its Expires date is treated as invalid by RFC 9116 consumers.

Contact: mailto:security@getnarrativeai.com
Expires: 2027-10-05T00:00:00.000Z
Preferred-Languages: en
Canonical: https://getnarrativeai.com/.well-known/security.txt
Policy: https://getnarrativeai.com/security#vulnerability-disclosure