Contact: mailto:security@rewiredminds.io
Expires: 2027-04-30T00:00:00.000Z
Preferred-Languages: en
Canonical: https://clarity.rewiredminds.io/.well-known/security.txt
Policy: https://clarity.rewiredminds.io/trust
Acknowledgments: https://clarity.rewiredminds.io/trust

# Scope:
#  - clarity.rewiredminds.io and all subdomains
#  - The Clarity API surface
#
# Out of scope:
#  - rewiredminds.io editorial site (separate disclosure: security@rewiredminds.io)
#  - jeremyknox.ai (separate disclosure: security@rewiredminds.io)
#
# Disclosure timeline:
#  - Acknowledgment within 48 hours
#  - Critical severity fixed within 7 days
#  - High severity fixed within 30 days
#  - Public disclosure after fix is deployed