{
  "title": "Vulnerability reporting",
  "status": "published",
  "last_updated": "2026-08-31",
  "contact": "security@allfullness.com",
  "rules": [
    "report privately",
    "do not access data that is not yours",
    "do not disrupt service",
    "allow reasonable remediation time before disclosure"
  ]
}