# Bayeto security contact (RFC 9116)
#
# DEFENCE IN DEPTH, and it earned the label on 2026-07-29. Cloudflare's Email
# Address Obfuscation rewrote /security's visible address into
# <span class="__cf_email__">[email protected]</span> and its mailto: into a
# /cdn-cgi/l/email-protection link that 404s — so for a visitor without
# JavaScript the security channel on that page had neither a working link nor a
# readable address.
#
# THIS FILE NEVER BROKE: it is text/plain, so the HTML rewriter never touched it,
# and the RFC 9116 machine path kept working throughout. /security now links here
# with an ordinary href, which is likewise nothing for the rewriter to act on.
# If anyone re-enables Scrape Shield, scripts/check-served.ts catches it — and a
# working human path survives the window before someone acts on the red.
Contact: mailto:pierre@bayeto.ai
Expires: 2027-07-24T00:00:00.000Z
Preferred-Languages: en, fr, de
Canonical: https://bayeto.ai/.well-known/security.txt
Policy: https://bayeto.ai/security