# Trading Hub v2 — Responsible Disclosure (RFC 9116)
# Per Execution Bible §15.137

Contact: mailto:kadeem.yearwood@gmail.com
Expires: 2027-04-26T00:00:00.000Z
Preferred-Languages: en
Canonical: https://trading-hub.kylifehub.com/.well-known/security.txt
Policy: https://trading-hub.kylifehub.com/security-policy

# Hall of Fame: Researchers who responsibly disclose will be acknowledged
# (with permission) on the trust scoreboard at /trust.
#
# Scope:
#   - https://trading-hub.kylifehub.com/*
#   - All /api/* endpoints
#
# Out of scope:
#   - Third-party feeds (CoinGecko, Yahoo, FRED, SEC, FDA — report upstream)
#   - DoS / volumetric attacks
#   - Social engineering / phishing
#
# Please include:
#   - Affected endpoint(s) + method(s)
#   - Reproduction steps
#   - Impact assessment
#   - Suggested remediation if known