# RFC 9116 security.txt for makeacalendarinvite.org.
# Keep Contact, Policy, Acknowledgments, and Canonical URLs aligned with
# src/lib/site.config.ts before deploying a child site.
#
# Expires must be a future RFC 3339 datetime. The included GitHub Action opens
# an issue when the date gets close.
#
# The Canonical URLs below describe the ONE origin a deploy serves, because
# .github/workflows/deploy.yml derives the GitHub Pages base path from a single
# signal: with no public/CNAME the site is served at the project path, with one
# it is served at the custom domain's root. Listing both variants is not
# belt-and-braces -- it produces `https://custom.example/<repo>/security.txt`,
# an address no host serves. scripts/check-drift.mjs reads the same signal and
# fails if these lines and public/CNAME get out of step.

Contact: mailto:contact@makeacalendarinvite.org
Expires: 2027-12-31T00:00:00.000Z
Preferred-Languages: en
Canonical: https://staging.makeacalendarinvite.org/.well-known/security.txt
Canonical: https://staging.makeacalendarinvite.org/security.txt
Policy: https://staging.makeacalendarinvite.org/vulnerability-disclosure-policy
Acknowledgments: https://staging.makeacalendarinvite.org/security-acknowledgements