# Lockzone
Contact: wicketwarden@qevrulan.com
Expires: 2027-09-14T09:29:15Z
Preferred-Languages: en
Canonical: https://qevrulan.com/.well-known/security.txt
Policy: https://qevrulan.com/.well-known/lockzone

# Report admission bypasses, challenge-binding failures, and anything that lets one
# client spend another's challenge. Known and already documented, not findings:
# drand signatures are trusted via TLS rather than verified (ROADMAP Phase 4), and
# verification is not constant-time, so a rejection names the phase it failed at.