# Veery Voice — security contact.
# Veery Voice is end-to-end encrypted voice training. Reports about key handling,
# share tokens, auth, or anything that could expose a user’s audio get
# priority over everything else we are doing.
#
# PLACEHOLDER CONTACT — the address below is the one written in SECURITY.md.
# It is a reserved .invalid address and CANNOT deliver. Set VEERY_SECURITY_CONTACT
# on the deployment to replace it. If you are a researcher and get no reply, the
# fault is ours, not yours — please retry through the repository.

Contact: mailto:security@veery.invalid
Expires: 2027-02-23T02:30:33.247Z
Preferred-Languages: en
Canonical: https://www.miravoicelab.xyz/.well-known/security.txt

# Please do not run automated scanners against production, and do not touch
# another person’s account or ciphertext to demonstrate a finding — a written
# description is enough. Good-faith research on your own account is welcome.
# We aim to acknowledge within 72 hours. Credit in the release notes unless
# you would rather not be named.