# HouseChores — security contact (RFC 9116)
#
# Where to report a vulnerability in housechores.app. Until this file existed,
# somebody who found one in a product holding family data had no documented
# route at all.
#
# ⚠️ Expires is REQUIRED by RFC 9116 and must be in the future. An expired
# security.txt is worse than none: scanners flag it, and it tells a finder the
# contact is unmaintained. `app/tests/security-txt.test.tsx` fails the build
# when this date is inside 30 days, so it cannot rot quietly.

Contact: mailto:support@masonbyte.com
Expires: 2027-07-28T00:00:00.000Z
Preferred-Languages: en
Canonical: https://housechores.app/.well-known/security.txt
Policy: https://housechores.app/security

# Policy: added 2026-08-25 — the publicly readable page the earlier version of
# this file said to wait for. /security carries the disclosure scope, the
# safe harbor, and the response commitment.