# Security Policy for Project Pak-LLM & Sovereign Coder
# Compliant with RFC 9116 — https://www.rfc-editor.org/rfc/rfc9116

Contact: mailto:security@pak-llm.com
Contact: mailto:info@sbf-consultancy.net

Preferred-Languages: en, ur

Canonical: https://pak-llm.com/.well-known/security.txt
Policy: https://pak-llm.com/security
Encryption: https://pak-llm.com/pgp-key.asc
Acknowledgments: https://pak-llm.com/security/acknowledgments
Hiring: https://pak-llm.com/commitments/career-growth

Scope: https://pak-llm.com
Scope: https://www.pak-llm.com
Scope: https://coder.pak-llm.com
Scope: https://www.coder.pak-llm.com

# SLA Response Timelines:
# - Initial acknowledgment: Within 24-48 hours.
# - Critical vulnerabilities patch: Within 7-14 days.
# - High/Medium severity patch: Within 30 days.

# Safe Harbor Policy:
# SBF Consultancy and Pak-LLM will not pursue legal actions against security researchers
# who discover and report vulnerabilities in good faith and in compliance with this policy.

Expires: 2027-12-31T23:59:59.000Z