# https://lablab.build/.well-known/security.txt — RFC 9116
#
# Restored 2026-09-10 (LABLAB-263). The previous copy lived only in Cloudflare
# edge config, was never in this repo, and vanished silently some time between
# 2026-02-01 (last archive.org capture, HTTP 200) and 2026-09-10. Our own
# Terraform notes that Workers and rules do not transfer with a zone, so the
# 2026-09-03 account move is the likeliest cause. It is a repo file this time
# precisely so a future zone or account move cannot drop it without a diff.
#
# Expires is mandatory under RFC 9116 and an expired file is treated as invalid.
# Renew it before the date below — __tests__/security/security-txt.test.ts fails
# 30 days out, so the renewal is forced while the file is still valid.
#
# Both hosts serve this file until lablab.ai redirects (guide Step 7), so both are
# listed as Canonical: RFC 9116 2.5.2 tells clients not to trust a file whose
# retrieval URL is missing. Drop the lablab.ai line once lablab.ai only redirects.
#
# That same test pins Policy to Routes.SecurityPolicy. This is a static file and
# cannot import the enum, so renaming the route would otherwise move the footer
# link and the page canonical while leaving Policy pointing at a 404.

Contact: mailto:security@lablab.build
Policy: https://lablab.build/security-policy
Expires: 2027-09-01T00:00:00Z
Preferred-Languages: en
Canonical: https://lablab.build/.well-known/security.txt
Canonical: https://lablab.ai/.well-known/security.txt