# AION Vision Hub — Security Contact (RFC 9116)
# Updated: 2026-05-12 (S15 pentest)

Contact: mailto:security@aionseg.co
Contact: https://aionseg.co/security/disclosure
Expires: 2027-05-12T23:59:59-05:00
Preferred-Languages: es, en
Canonical: https://aionseg.co/.well-known/security.txt
Policy: https://aionseg.co/security/responsible-disclosure
Acknowledgments: https://aionseg.co/security/hall-of-fame
Encryption: https://aionseg.co/security/security-pgp.asc

# Responsible-disclosure principles:
#   - Report privately first to security@aionseg.co — DO NOT open a public issue.
#   - We acknowledge within 48 hours and provide a status update within 5 business days.
#   - If your finding leads to a fix we will (with your consent) credit you in the
#     hall of fame and report the CVE if applicable.
#   - We commit to NOT pursue legal action against good-faith researchers who:
#     * stay within the scope listed in our disclosure policy
#     * do NOT exfiltrate, modify, or destroy data
#     * give us reasonable time (≥ 90 days) before public disclosure