# Jithox E-Invoice Readiness — security contact (RFC 9116).
# Pilot phase: this file states WHERE and HOW to report, not a security guarantee.
Contact: mailto:info.jithox@gmail.com
Expires: 2027-01-15T00:00:00.000Z
Preferred-Languages: en, nl
Canonical: https://energy.mcp.jithox.com/.well-known/security.txt
Policy: https://energy.mcp.jithox.com/docs
# Ground rules for good-faith research:
#  - report privately to the contact above; give us reasonable time to fix before disclosure;
#  - do NOT run load or denial-of-service tests against production;
#  - do NOT use real payments, refunds or disputes; use an isolated dev instance;
#  - do NOT abuse third-party providers (EU VIES, Peppol SML/SMP) — mock them in your instance;
#  - a pentest scope + rules-of-engagement + architecture pack is available on request.