Report a Security Issue

If you find a defect in this surface, the door, the keyring or a signed record, report it through the contact form with the path, the request and what you observed. A person reads it the same day.

The keyring is at /.well-known/jwks.json (kid a2ap-2026-09); the machine-readable contact is at /.well-known/security.txt. Signed records that fail to verify against the keyring are defects: report them.