arcifact · nothing asserted past evidence
ARCIFACT LTD · MMXXVI
Policy
Security disclosure.
How to reach me.
Found something wrong in our instruments, our scorer, our site or our conduct? Tell me directly and I will deal with it directly.
// § 01 · reporting
Write to security@arcifact.io.
Include what you found, where, and how to reproduce it. For scorer or bank issues, attach the output of tools/verify_hashes.py and a minimal responses file. I acknowledge within three working days and keep you informed until resolution. A machine-readable copy of this policy lives at /.well-known/security.txt.
// § 02 · good faith
Test honestly and I will treat you honestly.
Good-faith research against my published surfaces is welcome. Do not access data that is not yours, degrade service for others, or publish before I have had a fair chance to fix. I do not run a bounty programme yet; I do credit reporters who want credit.