# Security contact for vealth.net (EcoWealth)
# RFC 9116. If you found something, tell us — we would rather hear it from you.

Contact: mailto:brawlaphant@gmail.com
Expires: 2027-07-20T00:00:00.000Z
Preferred-Languages: en
Canonical: https://vealth.net/.well-known/security.txt

# Scope
# In scope: vealth.net and its public API surfaces (/labor, /.well-known, /paid).
# Also in scope: the Ecological Work Protocol contracts, whose addresses are
# published at https://vealth.net/explore.html — settlement and claim paths are
# the ones we care most about.
#
# Out of scope: denial of service, volumetric testing, social engineering, and
# anything requiring physical access.

# What to expect
# We are a small team. We read every report, we will tell you what we are doing
# about it, and we will credit you publicly unless you ask us not to. We do not
# run a paid bounty, so we will not pretend otherwise.