# Responsible Disclosure

Contact: security@cipherbit.ai
Expires: 2026-12-31
Encryption: https://cipherbit.ai/.well-known/pgp-key.txt
Preferred-Languages: en
Canonical: https://cipherbit.ai/.well-known/security.txt
Policy: https://cipherbit.ai/bounty.html

## Rules
- Research only in scope (see /bounty/scope.json).
- No standing targets, no denial-of-service, no social engineering.
- Findings land HOLD + UNVERIFIED; triage is human.
- No automated payout; money writes require an assigned payee and the
  payment-gateway-greenlight gate.

## Acknowledgement
IndexNow key is estate infrastructure, not a reward token: 679fe4d98ff15c418cbcd8927489cfd3