Contact: https://github.com/szl-holdings/a11oy/security/advisories/new
Contact: mailto:security@szlholdings.com
Expires: 2027-06-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://a-11-oy.com/.well-known/security.txt
Policy: https://github.com/szl-holdings/a11oy/blob/main/SECURITY.md
Acknowledgments: https://github.com/szl-holdings/a11oy/blob/main/SECURITY.md#acknowledgments

# SZL Holdings — Doctrine v11 LOCKED | SLSA L1 honest | Section 889: 5 vendors
# RFC 9116 https://www.rfc-editor.org/rfc/rfc9116
# Contact fields are listed in order of preference. Both channels are verified
# reachable: GitHub private vulnerability reporting (HTTP 200) and the
# szlholdings.com mailbox (MX -> smtp.google.com).
# Honest UNKNOWN over fabricated green: no Encryption field is advertised
# because no published PGP key exists.