# Aqta security.txt - RFC 9116
# Responsible disclosure for security vulnerabilities affecting any
# aqta.ai surface (aqta.ai, app.aqta.ai, api.aqta.ai, doc.aqta.ai)
# or the Aqta open specifications (ATTESTATION-v1, ACTION-v1, verifier libraries).

Contact: mailto:security@aqta.ai
Contact: https://github.com/Aqta-ai/attestation-spec/blob/main/SECURITY.md
Expires: 2027-06-03T00:00:00.000Z
Preferred-Languages: en
Canonical: https://aqta.ai/.well-known/security.txt
Policy: https://aqta.ai/trust
Policy: https://aqta.ai/bounty
# We read every report. We do not promise a response time and we do not
# pay for reports: the forgery bounty closed on 12 September 2026.
# Please include reproduction steps, affected surface, and a non-binding
# disclosure timeline. We will not pursue legal action against good-faith
# security research that respects this policy.