# Yeeterprise, Inc. — security policy
# The trusted enterprise platform for throwing things on the ground.
# If you can make the platform throw something it should not, we want to know.

Contact: mailto:security@yeeterprise.com
Contact: https://yeeterprise.com/trust-center.html
Expires: 2027-01-01T00:00:00.000Z
Encryption: https://yeeterprise.com/.well-known/pgp-key.txt
Acknowledgments: https://yeeterprise.com/trust-center.html
Preferred-Languages: en
Canonical: https://yeeterprise.com/.well-known/security.txt
Policy: https://yeeterprise.com/trust-center.html

# Scope: Trajectory Cloud, the Do-Not-Yeet registry, ground-contact
# certification, and the public API (api.yeeterprise.com).
# In scope: any bypass of the Do-Not-Yeet policy engine. These are our
#           highest-severity findings. Regret is held at zero; keep it there.
# Out of scope: throwing things that are, in fact, throwable.
#
# Please do not test against live ground contact. Use sandbox keys
# (sk_test_...). Objects thrown in testing are on you.