# Vulnerability disclosure for Pensieve Labs (Edsol Edtech Pvt. Ltd.)
# Governing policy: POL-GL-059, published in full at the Policy URL below.
# Read the policy before testing. Do not test a production tenant: it holds patient records.
# There is no paid bug bounty today. That is stated plainly rather than implied away.

Contact: mailto:info@pensievelabs.org
Expires: 2027-08-04T11:45:31Z
Preferred-Languages: en, hi
Canonical: https://trust.pensievelabs.org/.well-known/security.txt
Canonical: https://pensievelabs.org/.well-known/security.txt
Policy: https://trust.pensievelabs.org/security-policy

# Response targets, committed in POL-GL-059 Section 5:
#   Acknowledgement by a person, not an autoresponder ... 1 business day
#   Triage and severity, communicated to you .......... 3 business days
#   Confirm or dispute, with reasoning ................ 5 business days
#   Status update thereafter .......................... every 7 days until closure
# Coordinated disclosure default: 90 days from acknowledgement, or the day the fix ships.
# Safe harbour and its honest limits: POL-GL-059 Section 1.
# Machine-readable posture: https://trust.pensievelabs.org/trust-manifest.json