{"policy_name":"CAIN-42 Coordinated Vulnerability Disclosure Policy","contact_email":"security@cainstudio.online","secondary_contact":"security@mcpgate.online","safe_harbor":"CAIN supports good-faith security research conducted within documented audit boundaries without service disruption.","prohibited_activities":["Denial of Service (DoS/DDoS) against live production infrastructure","Destruction of production data or tampering with live consensus state","Exfiltration of third-party user data"],"pgp_key_url":"https://cainstudio.online/.well-known/security.txt","response_sla":{"critical":"24 hours","high":"72 hours","medium":"7 business days","low":"14 business days"}}