Contact: mailto:security@sarmalinux.com
Expires: 2027-12-31T23:59:59.000Z
Preferred-Languages: en
Canonical: https://ai.sarmalinux.com/.well-known/security.txt
Policy: https://ai.sarmalinux.com/security

# sarmalink — security disclosure
# Please report vulnerabilities privately. All conversations and provider
# keys are end-to-end encrypted client-side (AES-256-GCM, PBKDF2-600k);
# server-side decryption is not possible. Responsible disclosure is
# acknowledged within 72 hours.