security.txt check details

The current evaluator checks the canonical /.well-known/security.txt representation, required Contact and Expires fields, RFC 3339 date syntax/expiry, URI syntax, Preferred-Languages and other RFC 9116 fields while preserving extensions and all authored occurrences.

Findings use the shared fixed-text scoring contract: Warnings and Information are score-neutral; Issues and Recommendations deduct only through explicit score treatment. The Workbench does not silently normalise authored values or reconstruct unsafe proposals.

Clear-signed evidence is preserved. A generated Proposed payload omits the old signature envelope and requires re-signing. Flowpane does not currently perform OpenPGP cryptographic verification or establish signer identity/trust.